CVE-2018-10659

CWE-119 — Buffer Overflow3 documents3 sources
Severity
7.5HIGH
EPSS
1.2%
top 21.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
390
Axis A1001 FirmwareAxis A8004-v FirmwareAxis A8105-e Firmware+387 more
Timeline
PublishedJun 26
Latest updateMay 14

Description

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages390 packages

▶NVDaxis/a1001_firmware< 1.65.1
▶NVDaxis/a9161_firmware< 1.65.0
▶NVDaxis/a9188_firmware< 1.65.0
▶NVDaxis/c2005_firmware< 1.81.040.1
▶NVDaxis/c8033_firmware< 1.81.040.1

🔴Vulnerability Details

2
GHSA
GHSA-xw4p-j8wm-rwx3: There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash↗2022-05-14
▶
CVEList
CVE-2018-10659: There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash↗2018-06-26
▶
CVE-2018-10659 (HIGH CVSS 7.5) | There was a Memory Corruption issue | cvebase.io