CVE-2018-17558
Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP TVIP20050 LM.1.6.18, TVIP10051 LM.1.6.18, TVIP11050 MG.1.6.03.05, TVIP20550 LM.1.6.18, TVIP10050 LM.1.6.18, TVIP11550 MG.1.6.03, TVIP21050 MG.1.6.03, and TVIP51550 MG.1.6.03 cameras allow remote attackers to execute code as root.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2023-10-26
- Last modified
- 2024-09-11
- Weaknesses
- CWE-78, CWE-798
Affected products
- Tvip 10000 Firmware (Abus)
- Tvip 10001 Firmware (Abus)
- Tvip 10005 Firmware (Abus)
- Tvip 10005a Firmware (Abus)
- Tvip 10005b Firmware (Abus)
- Tvip 10050 Firmware (Abus)
- Tvip 10051 Firmware (Abus)
- Tvip 10055a Firmware (Abus)
- Tvip 10055b Firmware (Abus)
- Tvip 10500 Firmware (Abus)
- Tvip 10550 Firmware (Abus)
- Tvip 11000 Firmware (Abus)
- Tvip 11050 Firmware (Abus)
- Tvip 11500 Firmware (Abus)
- Tvip 11501 Firmware (Abus)
- Tvip 11502 Firmware (Abus)
- Tvip 11550 Firmware (Abus)
- Tvip 11551 Firmware (Abus)
- Tvip 11552 Firmware (Abus)
- Tvip 20000 Firmware (Abus)
- Tvip 20050 Firmware (Abus)
- Tvip 20500 Firmware (Abus)
- Tvip 20550 Firmware (Abus)
- Tvip 21000 Firmware (Abus)
- Tvip 21050 Firmware (Abus)
- Tvip 21500 Firmware (Abus)
- Tvip 21501 Firmware (Abus)
- Tvip 21502 Firmware (Abus)
- Tvip 21550 Firmware (Abus)
- Tvip 21551 Firmware (Abus)
- Tvip 21552 Firmware (Abus)
- Tvip 22500 Firmware (Abus)
- Tvip 31000 Firmware (Abus)
- Tvip 31001 Firmware (Abus)
- Tvip 31050 Firmware (Abus)
- Tvip 31500 Firmware (Abus)
- Tvip 31501 Firmware (Abus)
- Tvip 31550 Firmware (Abus)
- Tvip 31551 Firmware (Abus)
- Tvip 32500 Firmware (Abus)
- Tvip 51500 Firmware (Abus)
- Tvip 51550 Firmware (Abus)
- Tvip 71500 Firmware (Abus)
- Tvip 71501 Firmware (Abus)
- Tvip 71550 Firmware (Abus)
- Tvip 71551 Firmware (Abus)
- Tvip 72500 Firmware (Abus)
References
- https://sec.maride.cc/posts/abus/
- https://www.ccc.de/en/updates/2019/update-nicht-verfugbar-hersteller-nicht-zu-erreichen
