CVE-2018-17558 - CVE House
Back to Database
Status published Unknown CVE-2018-17558

Hardcoded manufacturer credentials and an OS command injection vulnerability in...

Vulnerability Description

Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP TVIP20050 LM.1.6.18, TVIP10051 LM.1.6.18, TVIP11050 MG.1.6.03.05, TVIP20550 LM.1.6.18, TVIP10050 LM.1.6.18, TVIP11550 MG.1.6.03, TVIP21050 MG.1.6.03, and TVIP51550 MG.1.6.03 cameras allow remote attackers to execute code as root.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-17558

Credits & Attribution

No credits recorded in the NVD database.

References

More from abus

View All →
CVE-2020-28973
The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to...
High 7.5
CVE-2020-14158
The ABUS Secvest FUMO50110 hybrid module does not have any...
Critical 9.1
CVE-2020-14157
The wireless-communication feature of the ABUS Secvest FUBE50001 device does...
High 8.1
CVE-2019-9863
Due to the use of an insecure algorithm for rolling...
Critical 9.8
CVE-2019-9862
An issue was discovered on ABUS Secvest wireless alarm system...
Medium 6.5

Affected Vendor

Affected Software

tvip 10000 firmware, tvip 10001 firmware, tvip 10005 firmware, tvip 10005a firmware, tvip 10005b firmware, tvip 10050 firmware, tvip 10051 firmware, tvip 10055a firmware, tvip 10055b firmware, tvip 10500 firmware, tvip 10550 firmware, tvip 11000 firmware, tvip 11050 firmware, tvip 11500 firmware, tvip 11501 firmware, tvip 11502 firmware, tvip 11550 firmware, tvip 11551 firmware, tvip 11552 firmware, tvip 20000 firmware, tvip 20050 firmware, tvip 20500 firmware, tvip 20550 firmware, tvip 21000 firmware, tvip 21050 firmware, tvip 21500 firmware, tvip 21501 firmware, tvip 21502 firmware, tvip 21550 firmware, tvip 21551 firmware, tvip 21552 firmware, tvip 22500 firmware, tvip 31000 firmware, tvip 31001 firmware, tvip 31050 firmware, tvip 31500 firmware, tvip 31501 firmware, tvip 31550 firmware, tvip 31551 firmware, tvip 32500 firmware, tvip 51500 firmware, tvip 51550 firmware, tvip 71500 firmware, tvip 71501 firmware, tvip 71550 firmware, tvip 71551 firmware, tvip 72500 firmware
Vulnerable Versions:
Unknown

Timeline

Official Publish: October 26th, 2023
Last Modified: September 11th, 2024
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.