Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-10620 State: PUBLISHED Published: 2018-07-19T19:00:00Z Last Updated: 2024-09-16T19:40:31.800Z Vendors: AVEVA Software, LLC Products: InduSoft Web Studio, InTouch Machine Edition Problem Types: CWE-121 Description: AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed. Additional Analyst Notes: - CVE Program Container: References: - https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec128%28
ogram Container: References: - https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec128%28002%29.pdf - https://www.tenable.com/security/research/tra-2018-19 - https://ics-cert.us-cert.gov/advisories/ICSA-18-200-01 - http://www.securityfocus.com/bid/104870
CVE ID: CVE-2018-10621 State: PUBLISHED Published: 2018-06-18T19:00:00Z Last Updated: 2024-09-17T02:52:58.363Z Vendors: Delta Electronics Products: Delta Industrial Automation DOPSoft Problem Types: CWE-121 Description: Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length stack buffer where a value larger than the buffer can be read from a .dpa file into the buffer, causing the buffer to be overwritten. This may allow remote code execution or cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104375 - https://ics-cert.us-cert.gov/advisories/ICSA-18-151-01
CVE ID: CVE-2018-10622 State: PUBLISHED Published: 2018-08-10T18:00:00Z Last Updated: 2025-05-22T16:12:44.522Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Medtronic Products: 24950 MyCareLink Monitor, 24952 MyCareLink Monitor Problem Types: CWE-257 Description: Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication and encryption of local data at rest. Additional Analyst Notes: - CVE Program Container: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-8-7-18.html - https://ics-cert.us-cert.gov/
://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-8-7-18.html - https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-01 - http://www.securityfocus.com/bid/105042
CVE ID: CVE-2018-10623 State: PUBLISHED Published: 2018-06-18T19:00:00Z Last Updated: 2024-09-17T01:11:08.499Z Vendors: Delta Electronics Products: Delta Industrial Automation DOPSoft Problem Types: CWE-125 Description: Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the position can be determined by a value read from a .dpa file. This may cause improper restriction of operations within the bounds of the memory buffer, allow remote code execution, alter the intended control flow, allow reading of sensitive information, or cause the application to crash. Additional Analyst Notes: - CVE Program Container: Referen
of sensitive information, or cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104375 - https://ics-cert.us-cert.gov/advisories/ICSA-18-151-01
CVE ID: CVE-2018-10624 State: PUBLISHED Published: 2018-08-01T21:00:00Z Last Updated: 2024-09-17T00:11:43.873Z Vendors: Johnson Controls Products: Metasys System, BCPro (BCM) Problem Types: CWE-209 Description: In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical information. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-212-02 - http://www.securityfocus.com/bid/104937
CVE ID: CVE-2018-10626 State: PUBLISHED Published: 2018-08-10T18:00:00Z Last Updated: 2025-05-22T16:13:52.072Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Medtronic Products: 24950 MyCareLink Monitor, 24952 MyCareLink Monitor Problem Types: CWE-345 Description: Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired implantable cardiac device information can potentially upload invalid data to the Medtronic CareLink network. Additional Analyst Notes: - CVE Program Container: References: - https://global.medtronic.co
Medtronic CareLink network. Additional Analyst Notes: - CVE Program Container: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-8-7-18.html - https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-01 - http://www.securityfocus.com/bid/105042
CVE ID: CVE-2018-10627 State: PUBLISHED Published: 2018-07-24T17:00:00Z Last Updated: 2024-09-16T21:04:33.686Z Vendors: Echelon Products: SmartServer 1, SmartServer 2, i.LON 100, i.LON 600 Problem Types: CWE-200 Description: Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can use the SOAP API to retrieve and change sensitive configuration items such as the usernames and passwords for the Web and FTP servers. This vulnerability does not affect the i.LON 600 product. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03
CVE ID: CVE-2018-10628 State: PUBLISHED Published: 2018-07-24T18:00:00Z Last Updated: 2024-09-16T19:09:25.647Z Vendors: AVEVA Software, LLC. Products: InTouch Problem Types: CWE-121 Description: AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on a locale not using a dot floating point separator. Exploitation could allow remote code execution under the privileges of the InTouch View process. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-200-02 - https://sw.aveva.com/hubfs/assets-20
m Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-200-02 - https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec127%28003%29.pdf - http://www.securityfocus.com/bid/104864
CVE ID: CVE-2018-10630 State: PUBLISHED Published: 2018-08-10T19:00:00Z Last Updated: 2024-09-16T16:52:46.583Z Vendors: ICS-CERT Products: Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001 Problem Types: CWE-284 Description: For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped with authentication disabled, and there is no indication to users that they need to take steps to enable it. When compromised, the access to the CTP console is left open. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105051 - https://ics-cert.us-cert.gov/advisories/
CVE Program Container: References: - http://www.securityfocus.com/bid/105051 - https://ics-cert.us-cert.gov/advisories/ICSA-18-221-01
CVE ID: CVE-2018-10631 State: PUBLISHED Published: 2018-07-13T19:00:00.000Z Last Updated: 2025-08-26T14:26:52.840Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Medtronic Products: 8840 N’Vision Clinician Programmer, 8870 N’Vision removable Application Card Problem Types: CWE-693 Description: The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted int
executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/nvision.html - https://www.medtronic.com/security - https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01 - http://www.securityfocus.com/bid/104213
CVE ID: CVE-2018-10632 State: PUBLISHED Published: 2018-07-24T17:00:00Z Last Updated: 2024-09-17T03:23:02.337Z Vendors: Moxa Products: NPort 5210, 5230, and 5232 Problem Types: CWE-400 Description: In Moxa NPort 5210, 5230, and 5232 versions 2.9 build 17030709 and prior, the amount of resources requested by a malicious actor are not restricted, allowing for a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104863 - https://ics-cert.us-cert.gov/advisories/ICSA-18-200-04
CVE ID: CVE-2018-10633 State: PUBLISHED Published: 2018-07-11T17:00:00Z Last Updated: 2024-09-17T01:00:45.449Z Vendors: Universal Robots Products: Universal Robots Robot Controller version CB 3.1, SW Version 3.4.5-100 Problem Types: CWE-798 Description: Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow an attacker to reset passwords for the controller. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104710 - https://ics-cert.us-cert.gov/advisories/ICSA-18-191-01
CVE ID: CVE-2018-10634 State: PUBLISHED Published: 2018-08-13T22:00:00Z Last Updated: 2025-05-22T16:28:03.155Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Medtronic Products: MMT- 508 - MiniMed pump, MMT – 511 pump Paradigm, MMT – 512 / MMT – 712 Paradigm x12, MMT – 515 / MMT – 715 Paradigm x15, MMT – 522 / MMT – 722 Paradigm REAL-TIME, MMT – 522(K) / MMT – 722(K) Paradigm REAL-TIME, MMT – 523 / MMT – 723 Paradigm Revel, MMT – 523(K) / MMT – 723(K) Paradigm, MMT – 554 / MMT – 754 MiniMed Veo, MMT – 551 / MMT – 751 MiniMed 530G Problem Types: CWE-319 Description: Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted i
ypes: CWE-319 Description: Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker could capture these transmissions and extract sensitive information, such as device serial numbers. Additional Analyst Notes: - CVE Program Container: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed.html - https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-02 - http://www.securityfocus.com/bid/105044
CVE ID: CVE-2018-10635 State: PUBLISHED Published: 2018-07-11T17:00:00Z Last Updated: 2024-09-17T03:18:19.429Z Vendors: Universal Robots Products: Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 Problem Types: CWE-306 Description: In Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to 30003/TCP listen for arbitrary URScript code and execute the code. This enables a remote attacker who has access to the ports to remotely execute code that may allow root access to be obtained. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104710 - https://ics-cert.us-cert.gov/advisories/ICSA-18-1
ram Container: References: - http://www.securityfocus.com/bid/104710 - https://ics-cert.us-cert.gov/advisories/ICSA-18-191-01
CVE ID: CVE-2018-10636 State: PUBLISHED Published: 2018-08-13T22:00:00Z Last Updated: 2024-09-16T18:13:08.613Z Vendors: ICS-CERT Products: CNCSoft with ScreenEditor Problem Types: CWE-121 Description: CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to crash due to lacking user input validation before copying data from project files onto the stack. Which may allow an attacker to gain remote code execution with administrator privileges if exploited. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-219-01 - http://www.security
tes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-219-01 - http://www.securityfocus.com/bid/105032
CVE ID: CVE-2018-10637 State: PUBLISHED Published: 2018-09-13T20:00:00Z Last Updated: 2024-09-17T01:11:13.766Z Vendors: Fuji Electric Products: V-Server Lite Problem Types: CWE-120 Description: A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to execute arbitrary code that affects Fuji Electric V-Server Lite 4.0.3.0 and prior. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105328 - https://ics-cert.us-cert.gov/advisories/ICSA-18-254-02
CVE ID: CVE-2018-10641 State: PUBLISHED Published: 2018-05-04T03:00:00 Last Updated: 2024-08-05T07:46:46.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext. Additional Analyst Notes: - CVE Program Container: References: - https://www.peerlyst.com/posts/vulnerability-disclosure-insecure-authentication-practices-in-d-link-router-cve-2018-10641-joe-gray - https://advancedpersistentsecurity.net/cve-2018-10641/ - https://gist.github.com/jocephus/806ff4679cf54af130d69777a551f819
CVE ID: CVE-2018-10642 State: PUBLISHED Published: 2018-05-02T07:00:00 Last Updated: 2024-08-05T07:46:46.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig() that calls the vulnerable function eval(). Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/itop/tickets/1585/ - https://github.com/arbahayoub/POC/blob/master/itop_command_injection_1.txt
CVE ID: CVE-2018-10645 State: PUBLISHED Published: 2018-05-02T07:00:00 Last Updated: 2024-08-05T07:46:47.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Golden Frog VyprVPN 2.12.1.8015 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "VyprVPN" service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. The "SetProperty" method allows an attacker to configure the "AdditionalOpenVpnParameters" property and control the OpenVPN command line. Using the OpenVPN "plugin" parameter, an attacker may specify a dynamic library plugin that should run for every new VPN connection attempt.
ugin" parameter, an attacker may specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user. This attack may be conducted using "VyprVPN Free" account credentials and the VyprVPN Desktop Client. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/blob/master/advisories/VS-2018-025.md
CVE ID: CVE-2018-10646 State: PUBLISHED Published: 2018-05-02T07:00:00 Last Updated: 2024-08-05T07:46:47.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: CyberGhost 6.5.0.3180 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "CG6Service" service. This service establishes a NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "ConnectToVpnServer" method accepts a "connectionParams" argument that provides attacker control of the OpenVPN command line. An attacker can specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in
specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/blob/master/advisories/VS-2018-023.md
CVE ID: CVE-2018-10647 State: PUBLISHED Published: 2018-05-02T07:00:00 Last Updated: 2024-08-05T07:46:46.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: SaferVPN 4.2.5 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "SaferVPN.Service" service. The "SaferVPN.Service" service executes "openvpn.exe" using OpenVPN config files located within the current user's %LOCALAPPDATA%\SaferVPN\OvpnConfig directory. An authenticated attacker may modify these configuration files to specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user. Additional Analyst Notes: - CVE P
N connection attempt. This plugin will execute code in the context of the SYSTEM user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/blob/master/advisories/VS-2018-024.md
CVE ID: CVE-2018-10648 State: PUBLISHED Published: 2018-05-23T17:00:00 Last Updated: 2024-08-05T07:46:46.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX234879
CVE ID: CVE-2018-10649 State: PUBLISHED Published: 2018-05-23T17:00:00 Last Updated: 2024-08-05T07:46:46.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX234879
CVE ID: CVE-2018-10650 State: PUBLISHED Published: 2018-05-23T17:00:00 Last Updated: 2024-08-05T07:46:46.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX234879
CVE ID: CVE-2018-10651 State: PUBLISHED Published: 2018-05-23T17:00:00 Last Updated: 2024-08-05T07:46:46.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX234879
CVE ID: CVE-2018-10652 State: PUBLISHED Published: 2018-05-23T17:00:00 Last Updated: 2024-08-05T07:46:46.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX234879
CVE ID: CVE-2018-10653 State: PUBLISHED Published: 2018-05-23T17:00:00 Last Updated: 2024-08-05T07:46:46.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX234879 - http://packetstormsecurity.com/files/156037/Citrix-XenMobile-Server-10.8-XML-Injection.html
CVE ID: CVE-2018-10654 State: PUBLISHED Published: 2018-05-23T17:00:00 Last Updated: 2024-08-05T07:46:46.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX234879
CVE ID: CVE-2018-10655 State: PUBLISHED Published: 2018-05-10T14:00:00 Last Updated: 2024-08-05T07:46:46.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: DLPnpAuditor.exe in DeviceLock Plug and Play Auditor (freeware) 5.72 has a Unicode Buffer Overflow (SEH). Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org/advisories/DEVICELOCK-PLUG-PLAY-AUDITOR-v5.72-UNICODE-BUFFER-OVERFLOW.txt - https://www.exploit-db.com/exploits/44590/ - http://packetstormsecurity.com/files/147516/DeviceLock-Plug-And-Play-Auditor-5.72-Buffer-Overflow.html
CVE ID: CVE-2018-10657 State: PUBLISHED Published: 2018-05-02T16:00:00Z Last Updated: 2024-09-16T22:51:25.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to federation/federation_base.py and handlers/message.py, as exploited in the wild in April 2018. Additional Analyst Notes: - CVE Program Container: References: - https://matrix.org/blog/2018/05/01/security-update-synapse-0-28-1/ - https://github.com/matrix-org/synapse/commit/33f469ba19586bbafa0cf2c7d7c35463bdab87eb
CVE ID: CVE-2018-10658 State: PUBLISHED Published: 2018-06-26T18:00:00 Last Updated: 2024-08-05T07:46:46.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code inside libdbus-send.so shared object or similar. Additional Analyst Notes: - CVE Program Container: References: - https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf - https://www.axis.com/files/faq/Advisory_ACV-128401.pdf - https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/
CVE ID: CVE-2018-10659 State: PUBLISHED Published: 2018-06-26T18:00:00 Last Updated: 2024-08-05T07:46:46.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction. Additional Analyst Notes: - CVE Program Container: References: - https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf - https://www.axis.com/files/faq/Advisory_ACV-128401.pdf - https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-i
is.com/files/faq/Advisory_ACV-128401.pdf - https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/
CVE ID: CVE-2018-10660 State: PUBLISHED Published: 2018-06-26T18:00:00 Last Updated: 2024-08-05T07:46:46.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf - https://www.exploit-db.com/exploits/45100/ - https://www.axis.com/files/faq/Advisory_ACV-128401.pdf - https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/
CVE ID: CVE-2018-10661 State: PUBLISHED Published: 2018-06-26T18:00:00 Last Updated: 2024-08-05T07:46:46.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control. Additional Analyst Notes: - CVE Program Container: References: - https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf - https://www.exploit-db.com/exploits/45100/ - https://www.axis.com/files/faq/Advisory_ACV-128401.pdf - https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/