9.8
CVSSv3

CVE-2018-17558

Published: 26/10/2023 Updated: 07/11/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP TVIP20050 LM.1.6.18, TVIP10051 LM.1.6.18, TVIP11050 MG.1.6.03.05, TVIP20550 LM.1.6.18, TVIP10050 LM.1.6.18, TVIP11550 MG.1.6.03, TVIP21050 MG.1.6.03, and TVIP51550 MG.1.6.03 cameras allow remote malicious users to execute code as root.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

abus tvip_10000_firmware -

abus tvip_10001_firmware -

abus tvip_10005_firmware -

abus tvip_10005a_firmware -

abus tvip_10005b_firmware -

abus tvip_10050_firmware -

abus tvip_10051_firmware -

abus tvip_10055a_firmware -

abus tvip_10055b_firmware -

abus tvip_10500_firmware -

abus tvip_10550_firmware -

abus tvip_11000_firmware -

abus tvip_11050_firmware -

abus tvip_11500_firmware -

abus tvip_11501_firmware -

abus tvip_11502_firmware -

abus tvip_11550_firmware -

abus tvip_11551_firmware -

abus tvip_11552_firmware -

abus tvip_20000_firmware -

abus tvip_20050_firmware -

abus tvip_20500_firmware -

abus tvip_20550_firmware -

abus tvip_21000_firmware -

abus tvip_21050_firmware -

abus tvip_21500_firmware -

abus tvip_21501_firmware -

abus tvip_21502_firmware -

abus tvip_21550_firmware -

abus tvip_21551_firmware -

abus tvip_21552_firmware -

abus tvip_22500_firmware -

abus tvip_31000_firmware -

abus tvip_31001_firmware -

abus tvip_31050_firmware -

abus tvip_31500_firmware -

abus tvip_31501_firmware -

abus tvip_31550_firmware -

abus tvip_31551_firmware -

abus tvip_32500_firmware -

abus tvip_51500_firmware -

abus tvip_51550_firmware -

abus tvip_71500_firmware -

abus tvip_71501_firmware -

abus tvip_71550_firmware -

abus tvip_71551_firmware -

abus tvip_72500_firmware -