CVE-2018-17878
Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted string sent to sprintf() function.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2023-10-26
- Last modified
- 2024-08-05
- Weaknesses
- CWE-120
Affected products
- Tvip 10000 Firmware (Abus)
- Tvip 10001 Firmware (Abus)
- Tvip 10005 Firmware (Abus)
- Tvip 10005a Firmware (Abus)
- Tvip 10005b Firmware (Abus)
- Tvip 10050 Firmware (Abus)
- Tvip 10051 Firmware (Abus)
- Tvip 10055a Firmware (Abus)
- Tvip 10055b Firmware (Abus)
- Tvip 10500 Firmware (Abus)
- Tvip 10550 Firmware (Abus)
- Tvip 11000 Firmware (Abus)
- Tvip 11050 Firmware (Abus)
- Tvip 11500 Firmware (Abus)
- Tvip 11501 Firmware (Abus)
- Tvip 11502 Firmware (Abus)
- Tvip 11550 Firmware (Abus)
- Tvip 11551 Firmware (Abus)
- Tvip 11552 Firmware (Abus)
- Tvip 20000 Firmware (Abus)
- Tvip 20050 Firmware (Abus)
- Tvip 20500 Firmware (Abus)
- Tvip 20550 Firmware (Abus)
- Tvip 21000 Firmware (Abus)
- Tvip 21050 Firmware (Abus)
- Tvip 21500 Firmware (Abus)
- Tvip 21501 Firmware (Abus)
- Tvip 21502 Firmware (Abus)
- Tvip 21550 Firmware (Abus)
- Tvip 21551 Firmware (Abus)
- Tvip 21552 Firmware (Abus)
- Tvip 22500 Firmware (Abus)
- Tvip 31000 Firmware (Abus)
- Tvip 31001 Firmware (Abus)
- Tvip 31050 Firmware (Abus)
- Tvip 31500 Firmware (Abus)
- Tvip 31501 Firmware (Abus)
- Tvip 31550 Firmware (Abus)
- Tvip 31551 Firmware (Abus)
- Tvip 32500 Firmware (Abus)
- Tvip 51500 Firmware (Abus)
- Tvip 51550 Firmware (Abus)
- Tvip 71500 Firmware (Abus)
- Tvip 71501 Firmware (Abus)
- Tvip 71550 Firmware (Abus)
- Tvip 71551 Firmware (Abus)
- Tvip 72500 Firmware (Abus)
References
- https://sec.maride.cc/posts/abus/#cve-2018-17878
- https://www.ccc.de/en/updates/2019/update-nicht-verfugbar-hersteller-nicht-zu-erreichen
