M3024 Lve Firmware

m3024-lve_firmware

Vendor: Axis • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-5677 1Axis 11M3024 Lve Firmware M3025 Ve FirmwareM7014 Firmware+8 more May 15, 2025 Feb 5, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Brandon Rothel from QED Secure Solutions and Sam Hanson of Dragos have found that the VAPIX API tcptest.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be...Show more Brandon Rothel from QED Secure Solutions and Sam Hanson of Dragos have found that the VAPIX API tcptest.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. The impact of exploiting this vulnerability is lower with operator-privileges compared to administrator-privileges service accounts. Please refer to the Axis security advisory for more information and solution.Show less
CVE-2018-10664 1Axis 390A1001 Firmware A8004 V FirmwareA8105 E Firmware+387 more Nov 21, 2024 Jun 26, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption.
CVE-2018-10663 1Axis 390A1001 Firmware A8004 V FirmwareA8105 E Firmware+387 more Nov 21, 2024 Jun 26, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation.
CVE-2018-10662 1Axis 390A1001 Firmware A8004 V FirmwareA8105 E Firmware+387 more Nov 21, 2024 Jun 26, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.
CVE-2018-10661 1Axis 390A1001 Firmware A8004 V FirmwareA8105 E Firmware+387 more Nov 21, 2024 Jun 26, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
CVE-2018-10660 1Axis 390A1001 Firmware A8004 V FirmwareA8105 E Firmware+387 more Nov 21, 2024 Jun 26, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.
CVE-2018-10659 1Axis 390A1001 Firmware A8004 V FirmwareA8105 E Firmware+387 more Nov 21, 2024 Jun 26, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that c...Show more There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction.Show less
CVE-2018-10658 1Axis 390A1001 Firmware A8004 V FirmwareA8105 E Firmware+387 more Nov 21, 2024 Jun 26, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code inside libdbus-send.so shared object or similar.