CVE-2018-10662

An issue was discovered in multiple models of Axis IP Cameras

published June 26, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.

CVSS
—
EPSS
80%
Percentile
99.6
In the wild
Unconfirmed
What it is

⚠️ Your Axis IP Cameras might be giving away more than you think! The exposed insecure interface is like leaving the front door wide open, inviting anyone to peek inside. 🔍 Imagine you're hosting a party and forgot to close the curtains—everyone outside can see in! That’s the vibe with these cameras, as they leave an unsecured pathway for potential intruders. An attacker could exploit this vulnerability to gain unauthorized access to your cameras, potentially exposing live feeds or sensitive settings. This could lead to privacy breaches and unauthorized surveillance, making your home or business an easy target.

Put simply

Imagine you're hosting a party and forgot to close the curtains—everyone outside can see in! That’s the vibe with these cameras, as they leave an unsecured pathway for potential intruders. This vulnerability arises from an exposed insecure interface that allows attackers to communicate with the camera without proper authentication or authorization, enabling unauthorized access to functions and settings.

What to do

An attacker could exploit this vulnerability to gain unauthorized access to your cameras, potentially exposing live feeds or sensitive settings. This could lead to privacy breaches and unauthorized surveillance, making your home or business an easy target. To protect yourself, update your Axis IP Cameras to the latest firmware as soon as possible. Additionally, ensure that any remote access features are securely configured and that default credentials are changed. 🔒 This is fixable! Patch those cameras and secure your space—you're well on your way to becoming a security hero! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.79538 · 99.6th percentile
Published
2018-06-26T18:00Z
EPSS history
Timeline
  • 26 JUN 18:00Z
    An issue was discovered in multiple models of Axis IP Cameras
    cvelistv5