peter bassill · operator
$ cve CVE-2018-10661 JSON

CVE-2018-10661 EXPLOIT

9.8
CRITICAL · CVSS 3.0 · EPSS 86.5% (pctl 100)

Patch early

A public exploit exists.

Description

An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.

Scoring

CVSS9.8 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS86.5% — more likely to be exploited than 100% of all CVEs
On CISA KEVno
Public exploityes
Published2018-06-26
Last modified2026-06-17

Affected (40)

VendorProduct
axisa1001
axisa1001 firmware
axisa8004-v
axisa8004-v firmware
axisa8105-e
axisa8105-e firmware
axisa9161
axisa9161 firmware
axisa9188
axisa9188 firmware
axisa9188-v
axisa9188-v firmware
axisc1004-e
axisc1004-e firmware
axisc2005
axisc2005 firmware
axisc3003-e
axisc3003-e firmware
axisc8033
axisc8033 firmware
axiscompanion bullet le
axiscompanion bullet le firmware
axiscompanion c360
axiscompanion c360 firmware
axiscompanion cube l
axiscompanion cube l firmware
axiscompanion cube lw
axiscompanion cube lw firmware
axiscompanion dome v
axiscompanion dome v firmware
axiscompanion dome wv
axiscompanion dome wv firmware
axiscompanion eye l
axiscompanion eye l firmware
axiscompanion eye lve
axiscompanion eye lve firmware
axiscompanion recorder 4ch
axiscompanion recorder 4ch firmware
axiscompanion recorder 8ch
axiscompanion recorder 8ch firmware

Public exploits

SourceTitleDate
exploit-dbAxis Network Camera - .srv to parhand Remote Code Execution (Metasploit)2018-07-27

References

→ the Explorer  ·  watch your stack  ·  NVD