CVE-2018-10659
HIGHAxis IP Camera Firmware - Denial of Service via UND ARM Instruction
Title source: llmDescription
There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction.
References (3)
Core 3
Core References
Vendor Advisory x_refsource_confirm
https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf
Vendor Advisory x_refsource_confirm
https://www.axis.com/files/faq/Advisory_ACV-128401.pdf
Exploit, Third Party Advisory x_refsource_misc
https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/
Scores
CVSS v3
7.5
EPSS
0.0179
EPSS Percentile
75.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-119
Status
published
Products (50)
axis/a1001_firmware
< 1.65.1
axis/a8004-v_firmware
< 1.65.2
axis/a8105-e_firmware
< 1.65.2
axis/a9161_firmware
< 1.65.0
axis/a9188-v_firmware
< 1.65.0
axis/a9188_firmware
< 1.65.0
axis/c1004-e_firmware
< 1.81.040.1
axis/c2005_firmware
< 1.81.040.1
axis/c3003-e_firmware
< 1.81.040.1
axis/c8033_firmware
< 1.81.040.1
... and 40 more
Published
Jun 26, 2018
Tracked Since
Feb 18, 2026