CVE-2018-17558
Critical
Description
Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP TVIP20050 LM.1.6.18, TVIP10051 LM.1.6.18, TVIP11050 MG.1.6.03.05, TVIP20550 LM.1.6.18, TVIP10050 LM.1.6.18, TVIP11550 MG.1.6.03, TVIP21050 MG.1.6.03, and TVIP51550 MG.1.6.03 cameras allow remote attackers to execute code as root.
SeverityCritical
CVSS9.8
Exploit probability—
ProductAbus Tvip 10000 Firmware
PublishedOct 26, 2023
First seenOct 26, 2023
Weakness typeCWE-78OS command injection
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| abus tvip_10000_firmware | No range specified | — |
| abus tvip_10001_firmware | No range specified | — |
| abus tvip_10005_firmware | No range specified | — |
| abus tvip_10005a_firmware | No range specified | — |
| abus tvip_10005b_firmware | No range specified | — |
| abus tvip_10050_firmware | No range specified | — |
| abus tvip_10051_firmware | No range specified | — |
| abus tvip_10055a_firmware | No range specified | — |
| abus tvip_10055b_firmware | No range specified | — |
| abus tvip_10500_firmware | No range specified | — |
| abus tvip_10550_firmware | No range specified | — |
| abus tvip_11000_firmware | No range specified | — |
| abus tvip_11050_firmware | No range specified | — |
| abus tvip_11500_firmware | No range specified | — |
| abus tvip_11501_firmware | No range specified | — |
| abus tvip_11502_firmware | No range specified | — |
| abus tvip_11550_firmware | No range specified | — |
| abus tvip_11551_firmware | No range specified | — |
| abus tvip_11552_firmware | No range specified | — |
| abus tvip_20000_firmware | No range specified | — |
| abus tvip_20050_firmware | No range specified | — |
| abus tvip_20500_firmware | No range specified | — |
| abus tvip_20550_firmware | No range specified | — |
| abus tvip_21000_firmware | No range specified | — |
| abus tvip_21050_firmware | No range specified | — |
| abus tvip_21500_firmware | No range specified | — |
| abus tvip_21501_firmware | No range specified | — |
| abus tvip_21502_firmware | No range specified | — |
| abus tvip_21550_firmware | No range specified | — |
| abus tvip_21551_firmware | No range specified | — |
| abus tvip_21552_firmware | No range specified | — |
| abus tvip_22500_firmware | No range specified | — |
| abus tvip_31000_firmware | No range specified | — |
| abus tvip_31001_firmware | No range specified | — |
| abus tvip_31050_firmware | No range specified | — |
| abus tvip_31500_firmware | No range specified | — |
| abus tvip_31501_firmware | No range specified | — |
| abus tvip_31550_firmware | No range specified | — |
| abus tvip_31551_firmware | No range specified | — |
| abus tvip_32500_firmware | No range specified | — |
| abus tvip_51500_firmware | No range specified | — |
| abus tvip_51550_firmware | No range specified | — |
| abus tvip_71500_firmware | No range specified | — |
| abus tvip_71501_firmware | No range specified | — |
| abus tvip_71550_firmware | No range specified | — |
| abus tvip_71551_firmware | No range specified | — |
| abus tvip_72500_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.