CVE-2018-17879

An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system() as root. There are several injection points in various scripts.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

21.85% chance of exploitation in the next 30 days, 97th percentile

Published

2023-10-26

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://sec.maride.cc/posts/abus/#cve-2018-17879

References

• CVE Record
• NVD entry

Related

• CVE-2018-17878
• CVE-2018-17880
• CVE-2018-17876
• CVE-2018-17881
• CVE-2018-17873
• CVE-2018-17888