CVE-2018-17879

Katalog CVE

CVSS 9.8 · Critical EPSS 21,9%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada abus tvip 10000 firmware, abus tvip 10001 firmware +45 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system() as root. There are several injection points in various scripts.

Rincian

Terbit di NVD

26 Oktober 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

21,9% peluang dieksploitasi; lebih tinggi dari 97,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://sec.maride.cc/posts/abus/#cve-2018-17879 exploit · advisory pihak ketiga
• https://www.ccc.de/en/updates/2019/update-nicht-verfugbar-hersteller-nicht-zu-erreichen advisory pihak ketiga