CVEvulnerability
CVE-2018-10662
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-06-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.
Affected configurations
• axis a1001 firmware (< 1.65.1)
• axis a8004-v firmware (< 1.65.2)
• axis a8105-e firmware (< 1.65.2)
• axis a9161 firmware (< 1.65.0)
• axis a9188 firmware (< 1.65.0)
• axis a9188-v firmware (< 1.65.0)
• axis c1004-e firmware (< 1.81.040.1)
• axis c2005 firmware (< 1.81.040.1)
• axis c3003-e firmware (< 1.81.040.1)
• axis c8033 firmware (< 1.81.040.1)
• axis companion bullet le firmware (< 8.20.1)
• axis companion c360 firmware (< 7.15.2.3)
• axis companion cube l firmware (< 8.20.1)
• axis companion cube lw firmware (< 8.20.1)
• axis companion dome v firmware (< 8.20.1)
• axis companion dome wv firmware (< 8.20.1)
• axis companion eye l firmware (< 8.20.1)
• axis companion eye lve firmware (< 8.20.1)
• axis companion recorder 4ch firmware (< 1.20.1)
• axis companion recorder 8ch firmware (< 1.20.1)
• axis d2050-ve firmware (< 7.35.4.2)
• axis f34 main unit firmware (< 6.50.2.3)
• axis f41 main unit firmware (< 6.50.2.3)
• axis f44 dual audio input firmware (< 6.50.2.3)
• axis f44 main unit firmware (< 6.50.2.3)
• axis fa54 main unit firmware (< 6.55.4.5)
• axis m1004-w firmware (< 5.51.5)
• axis m1013 firmware (< 5.51.5)
• axis m1014 firmware (< 5.51.5)
• axis m1025 firmware (< 5.51.5)
• axis m1033-w firmware (< 5.51.5)
• axis m1034-w firmware (< 5.51.5)
• axis m1045-lw firmware (< 8.20.1)
• axis m1054 firmware (< 5.51.5)
• axis m1065-l firmware (< 8.20.1)
• axis m1065-lw firmware (< 8.20.1)
• axis m1103 firmware (< 5.51.5)
• axis m1104 firmware (< 5.51.5)
• axis m1113 firmware (< 5.51.5)
• axis m1113-e firmware (< 5.51.5)
• axis m1114 firmware (< 5.51.5)
• axis m1114-e firmware (< 5.51.5)
• axis m1124 firmware (< 6.50.2.3)
• axis m1124-e firmware (< 6.50.2.3)
• axis m1125 firmware (< 6.50.2.3)
• axis m1125-e firmware (< 6.50.2.3)
• axis m1143-l firmware (< 5.60.1.10)
• axis m1144-l firmware (< 5.60.1.10)
• axis m1145 firmware (< 6.50.2.3)
• axis m1145-l firmware (< 6.50.2.3)
• axis m2014-e firmware (< 5.51.5)
• axis m2025-le firmware (< 8.20.1)
• axis m2026-le firmware (< 8.20.1)
• axis m2026-le mk ii firmware (< 8.10.1.1)
• axis m3004-v firmware (< 5.51.5)
• axis m3005-v firmware (< 5.51.5)
• axis m3006-v firmware (< 6.50.2.3)
• axis m3007-p firmware (< 6.50.2.3)
• axis m3007-pv firmware (< 6.50.2.3)
• axis m3014 firmware (< 5.51.5)
… and 330 more
References
- https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/ Exploit, Third Party Advisory
- https://www.axis.com/files/faq/Advisory_ACV-128401.pdf Vendor Advisory
- https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf Vendor Advisory
- https://www.exploit-db.com/exploits/45100/ Exploit, Third Party Advisory, VDB Entry
- https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/ Exploit, Third Party Advisory
- https://www.axis.com/files/faq/Advisory_ACV-128401.pdf Vendor Advisory
- https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf Vendor Advisory
- https://www.exploit-db.com/exploits/45100/ Exploit, Third Party Advisory, VDB Entry