VDOO Discovers Significant Vulnerabilities in Axis Cameras

guest · Jun 18, 2018

VDOO Discovers Significant Vulnerabilities in Axis Cameras
June 18, 2018
https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/

One of the vendors for which we found vulnerable devices was Axis Communications. Our team discovered a critical chain of vulnerabilities in Axis security cameras. The vulnerabilities allow an adversary that obtained the camera’s IP address to remotely take over the cameras (via LAN or internet). In total, VDOO has responsibly disclosed seven vulnerabilities to Axis security team.

The vulnerabilities’ IDs in Mitre are: CVE-2018-10658, CVE-2018-10659, CVE-2018-10660, CVE-2018-10661, CVE-2018-10662, CVE-2018-10663 and CVE-2018-10664.

Chaining three of the reported vulnerabilities together, allows an unauthenticated remote attacker that has access to the camera login page through the network (without any previous access to the camera or credentials to the camera) to fully control the affected camera.
Click to expand...

Log in or Sign up

VDOO Discovers Significant Vulnerabilities in Axis Cameras

guest Guest

Log in or Sign up

VDOO Discovers Significant Vulnerabilities in Axis Cameras

guest Guest

Useful Searches