CVE-2018-17559

Exploit

EPSS 0.89%
Veröffentlicht 26.10.2023 22:15:08
Zuletzt bearbeitet 21.11.2024 03:54:36
Erkennungen
Login

Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 5

NVD 47 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Abus ≫ Tvip 10000 Firmware Version -

Abus ≫ Tvip 10000 Version -

Abus ≫ Tvip 10001 Firmware Version -

Abus ≫ Tvip 10001 Version -

Abus ≫ Tvip 10005 Firmware Version -

Abus ≫ Tvip 10005 Version -

Abus ≫ Tvip 10005a Firmware Version -

Abus ≫ Tvip 10005a Version -

Abus ≫ Tvip 10005b Firmware Version -

Abus ≫ Tvip 10005b Version -

Abus ≫ Tvip 10050 Firmware Version -

Abus ≫ Tvip 10050 Version -

Abus ≫ Tvip 10051 Firmware Version -

Abus ≫ Tvip 10051 Version -

Abus ≫ Tvip 10055a Firmware Version -

Abus ≫ Tvip 10055a Version -

Abus ≫ Tvip 10055b Firmware Version -

Abus ≫ Tvip 10055b Version -

Abus ≫ Tvip 10500 Firmware Version -

Abus ≫ Tvip 10500 Version -

Abus ≫ Tvip 10550 Firmware Version -

Abus ≫ Tvip 10550 Version -

Abus ≫ Tvip 11000 Firmware Version -

Abus ≫ Tvip 11000 Version -

Abus ≫ Tvip 11050 Firmware Version -

Abus ≫ Tvip 11050 Version -

Abus ≫ Tvip 11500 Firmware Version -

Abus ≫ Tvip 11500 Version -

Abus ≫ Tvip 11501 Firmware Version -

Abus ≫ Tvip 11501 Version -

Abus ≫ Tvip 11502 Firmware Version -

Abus ≫ Tvip 11502 Version -

Abus ≫ Tvip 11550 Firmware Version -

Abus ≫ Tvip 11550 Version -

Abus ≫ Tvip 11551 Firmware Version -

Abus ≫ Tvip 11551 Version -

Abus ≫ Tvip 11552 Firmware Version -

Abus ≫ Tvip 11552 Version -

Abus ≫ Tvip 20000 Firmware Version -

Abus ≫ Tvip 20000 Version -

Abus ≫ Tvip 20050 Firmware Version -

Abus ≫ Tvip 20050 Version -

Abus ≫ Tvip 20500 Firmware Version -

Abus ≫ Tvip 20500 Version -

Abus ≫ Tvip 20550 Firmware Version -

Abus ≫ Tvip 20550 Version -

Abus ≫ Tvip 21000 Firmware Version -

Abus ≫ Tvip 21000 Version -

Abus ≫ Tvip 21050 Firmware Version -

Abus ≫ Tvip 21050 Version -

Abus ≫ Tvip 21500 Firmware Version -

Abus ≫ Tvip 21500 Version -

Abus ≫ Tvip 21501 Firmware Version -

Abus ≫ Tvip 21501 Version -

Abus ≫ Tvip 21502 Firmware Version -

Abus ≫ Tvip 21502 Version -

Abus ≫ Tvip 21550 Firmware Version -

Abus ≫ Tvip 21550 Version -

Abus ≫ Tvip 21551 Firmware Version -

Abus ≫ Tvip 21551 Version -

Abus ≫ Tvip 21552 Firmware Version -

Abus ≫ Tvip 21552 Version -

Abus ≫ Tvip 22500 Firmware Version -

Abus ≫ Tvip 22500 Version -

Abus ≫ Tvip 31000 Firmware Version -

Abus ≫ Tvip 31000 Version -

Abus ≫ Tvip 31001 Firmware Version -

Abus ≫ Tvip 31001 Version -

Abus ≫ Tvip 31050 Firmware Version -

Abus ≫ Tvip 31050 Version -

Abus ≫ Tvip 31500 Firmware Version -

Abus ≫ Tvip 31500 Version -

Abus ≫ Tvip 31501 Firmware Version -

Abus ≫ Tvip 31501 Version -

Abus ≫ Tvip 31550 Firmware Version -

Abus ≫ Tvip 31550 Version -

Abus ≫ Tvip 31551 Firmware Version -

Abus ≫ Tvip 31551 Version -

Abus ≫ Tvip 32500 Firmware Version -

Abus ≫ Tvip 32500 Version -

Abus ≫ Tvip 51500 Firmware Version -

Abus ≫ Tvip 51500 Version -

Abus ≫ Tvip 51550 Firmware Version -

Abus ≫ Tvip 51550 Version -

Abus ≫ Tvip 71500 Firmware Version -

Abus ≫ Tvip 71500 Version -

Abus ≫ Tvip 71501 Firmware Version -

Abus ≫ Tvip 71501 Version -

Abus ≫ Tvip 71550 Firmware Version -

Abus ≫ Tvip 71550 Version -

Abus ≫ Tvip 71551 Firmware Version -

Abus ≫ Tvip 71551 Version -

Abus ≫ Tvip 72500 Firmware Version -

Abus ≫ Tvip 72500 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.89%	0.546

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA-ADP	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

https://www.ccc.de/en/updates/2019/update-nicht-verfugbar-hersteller-nicht-zu-erreichen

Third Party Advisory

https://sec.maride.cc/posts/abus/#cve-2018-17559

Third Party Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2018-17559

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-17559

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-17559

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2018-17559