M7014 Firmware
Vulnerabilities
8
Known exploited
0
Max CVSS
9.8
Top EPSS
0.86682
Severity breakdown
Critical
3
High
5
Medium
0
Low
0
Affected version ranges
< 5.51.5< 5.51.7.7
Also matched as (raw): m7014_firmware
Top vulnerabilities
CVE-2018-10662An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.
CVE-2018-10661An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
CVE-2018-10660An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.
CVE-2023-5677Brandon
Rothel from QED Secure Solutions and Sam Hanson of Dragos have found that the VAPIX API tcptest.cgi
did not have a sufficient input validation allowing for a possible remote code
execution. This flaw can only be exploited after authenticating with an
operator- or administrator-privileged service account. The impact of exploiting
this vulnerability is lower with operator-privileges compared to
administrator-privileges service accounts. Please refer to the Axis security advisory
for more information and solution.
CVE-2018-10664An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption.
CVE-2018-10663An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation.
CVE-2018-10659There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction.
CVE-2018-10658There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code inside libdbus-send.so shared object or similar.