What is the CVSS score of CVE-2018-10660?

CVE-2018-10660 has a CVSS 3.0 base score of 9.8 (Critical). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 82.2%.

Is there a public PoC exploit available for CVE-2018-10660?

Yes, a public proof-of-concept exploit is available for CVE-2018-10660. Prioritise patching immediately. EPSS: 82.2%.

P1354 Firmware CVE-2018-10660

CRITICAL

OS Command Injection (CWE-78)

2018-06-26 cve@mitre.org

P1354 Firmware M1033 W Firmware A1001 Firmware A8004 V Firmware A8105 E Firmware A9161 Firmware A9188 Firmware A9188 V Firmware C1004 E Firmware C2005 Firmware C3003 E Firmware C8033 Firmware Companion Bullet Le Firmware Companion C360 Firmware Companion Cube L Firmware Companion Cube Lw Firmware Companion Dome V Firmware Companion Dome Wv Firmware Companion Eye L Firmware Companion Eye Lve Firmware Companion Recorder 4Ch Firmware Companion Recorder 8Ch Firmware D2050 Ve Firmware F34 Main Unit Firmware F41 Main Unit Firmware F44 Dual Audio Input Firmware F44 Main Unit Firmware Fa54 Main Unit Firmware M1004 W Firmware M1013 Firmware M1014 Firmware M1025 Firmware M1034 W Firmware M1045 Lw Firmware M1054 Firmware M1065 L Firmware M1065 Lw Firmware M1103 Firmware M1104 Firmware M1113 Firmware M1113 E Firmware M1114 Firmware M1114 E Firmware M1124 Firmware M1124 E Firmware M1125 Firmware M1125 E Firmware M1143 L Firmware M1144 L Firmware M1145 Firmware M1145 L Firmware M2014 E Firmware M2025 Le Firmware M2026 Le Firmware M2026 Le Mk Ii Firmware M3004 V Firmware M3005 V Firmware M3006 V Firmware M3007 P Firmware M3007 Pv Firmware M3014 Firmware M3015 Firmware M3016 Firmware M3024 Lve Firmware M3025 Ve Firmware M3026 Ve Firmware M3027 Pve Firmware M3037 Pve Firmware M3044 V Firmware M3044 Wv Firmware M3045 V Firmware M3045 Wv Firmware M3046 V Firmware M3046 V 1 8Mm Firmware M3047 P Firmware M3048 P Firmware M3104 L Firmware M3104 Lve Firmware M3105 L Firmware M3105 Lve Firmware M3106 L Firmware M3106 L Mk Ii Firmware M3106 Lve Firmware M3106 Lve Mk Ii Firmware M3113 R Firmware M3113 Ve Firmware M3114 R Firmware M3114 Ve Firmware M3203 Firmware M3203 V Firmware M3204 Firmware M3204 V Firmware M5013 Firmware M5013 V Firmware M5014 Firmware M5014 V Firmware M5054 Firmware M5055 Firmware M5065 Firmware M5525 E Firmware M7010 Firmware M7011 Firmware M7014 Firmware M7016 Firmware P1125 Z Firmware P1125 Zl Firmware P1126 Z Firmware P1126 Zl Firmware P1204 Firmware P1214 Firmware P1214 E Firmware P1224 E Firmware P1244 Firmware P1245 Firmware P1254 Firmware P1264 Firmware P1265 Firmware P1275 Firmware P1280 Firmware P1290 Firmware P1325 Z Firmware P1343 Firmware P1343 E Firmware P1344 Firmware P1344 E Firmware P1346 Firmware P1346 E Firmware P1347 Firmware P1347 E Firmware P1353 Firmware P1353 E Firmware P1354 E Firmware P1355 Firmware P1355 E Firmware P1357 Firmware P1357 E Firmware P1364 Firmware P1364 E Firmware P1365 Firmware P1365 Mk Ii Firmware P1365 E Firmware P1365 E Mk Ii Firmware P1367 Firmware P1367 E Firmware P1368 E Firmware P1405 E Firmware P1405 Le Firmware P1405 Le Mk Ii Firmware P1425 E Firmware P1425 Le Firmware P1425 Le Mk Ii Firmware P1427 E Firmware P1427 Le Firmware P1428 E Firmware P1435 E Firmware P1435 Le Firmware P1447 Le Firmware P1448 Le Firmware P3114 I Firmware P3114 Z Firmware P3115 I Firmware P3115 Z Firmware P3125 Z Firmware P3214 V Firmware P3214 Ve Firmware P3215 V Firmware P3215 Ve Firmware P3224 Lv Firmware P3224 Lv Mk Ii Firmware P3224 Lve Firmware P3224 Lve Mk Ii Firmware P3224 V Mk Ii Firmware P3224 Ve Mk Ii Firmware P3225 Lv Firmware P3225 Lv Mk Ii Firmware P3225 Lve Firmware P3225 Lve Mk Ii Firmware P3225 V Mk Ii Firmware P3225 Ve Mk Ii Firmware P3227 Lv Firmware P3227 Lve Firmware P3228 Lv Firmware P3228 Lve Firmware P3301 Firmware P3301 V Firmware P3304 Firmware P3304 V Firmware P3314 Z Firmware P3314 Zl Firmware P3315 Z Firmware P3315 Zl Firmware P3343 Firmware P3343 V Firmware P3343 Ve Firmware P3344 Firmware P3344 V Firmware P3344 Ve Firmware P3346 Firmware P3346 V Firmware P3346 Ve Firmware P3353 Firmware P3354 Firmware P3363 V Firmware P3363 Ve Firmware P3364 Lv Firmware P3364 Lve Firmware P3364 V Firmware P3364 Ve Firmware P3365 V Firmware P3365 Ve Firmware P3367 V Firmware P3367 Ve Firmware P3374 Lv Firmware P3374 V Firmware P3375 Lv Firmware P3375 Lve Firmware P3375 V Firmware P3375 Ve Firmware P3384 V Firmware P3384 Ve Firmware P3705 Z Firmware P3706 Z Firmware P3707 Pe Firmware P3904 R Firmware P3904 R Mk Ii Firmware P3905 R Firmware P3905 R Mk Ii Firmware P3905 Re Firmware P3915 R Firmware P3915 R Mk Ii Firmware P5414 E Firmware P5415 E Firmware P5512 Firmware P5512 E Firmware P5514 Firmware P5514 E Firmware P5515 Firmware P5515 E Firmware P5522 Firmware P5522 E Firmware P5532 Firmware P5532 E Firmware P5534 Firmware P5534 E Firmware P5544 Firmware P5624 E Firmware P5624 E Mk Ii Firmware P5635 E Firmware P5635 E Mk Ii Firmware P5635 Ze Firmware P7210 Firmware P7214 Firmware P7216 Firmware P7224 Blade Firmware P8513 Firmware P8514 Firmware P8524 Firmware Q1602 Firmware Q1602 E Firmware Q1604 Firmware Q1604 E Firmware Q1605 Z Firmware Q1614 Firmware Q1614 E Firmware Q1615 Firmware Q1615 Mk Ii Firmware Q1615 E Firmware Q1615 E Mk Ii Firmware Q1635 Firmware Q1635 E Firmware Q1635 Z Firmware Q1645 Firmware Q1647 Firmware Q1659 Firmware Q1755 Firmware Q1755 E Firmware Q1765 Le Firmware Q1765 Le Pt Mount Firmware Q1775 Firmware Q1775 E Firmware Q1910 Firmware Q1910 E Firmware Q1921 Firmware Q1921 E Firmware Q1922 Firmware Q1922 E Firmware Q1931 E Firmware Q1931 E Pt Mount Firmware Q1932 E Firmware Q1932 E Pt Mount Firmware Q1941 E Firmware Q1941 E Pt Mount Firmware Q1942 E Firmware Q1942 E Pt Mount Firmware Q2901 E Firmware Q2901 E Pt Mount Firmware Q3504 V Firmware Q3504 Ve Firmware Q3505 Sve Mk Ii Firmware Q3505 V Firmware Q3505 V Mk Ii Firmware Q3505 Ve Firmware Q3505 Ve Mk Ii Firmware Q3515 Lv Firmware Q3515 Lve Firmware Q3517 Lv Firmware Q3517 Lve Firmware Q3615 Ve Firmware Q3617 Ve Firmware Q3708 Pve Firmware Q3709 Pve Firmware Q6000 E Firmware Q6000 E Mk Ii Firmware Q6032 Firmware Q6032 C Firmware Q6032 E Firmware Q6034 Firmware Q6034 C Firmware Q6034 E Firmware Q6035 Firmware Q6035 C Firmware Q6035 E Firmware Q6042 Firmware Q6042 C Firmware Q6042 E Firmware Q6042 S Firmware Q6044 Firmware Q6044 C Firmware Q6044 E Firmware Q6044 S Firmware Q6045 Firmware Q6045 Mk Ii Firmware Q6045 C Firmware Q6045 C Mk Ii Firmware Q6045 E Firmware Q6045 E Mk Ii Firmware Q6045 S Firmware Q6045 S Mk Ii Firmware Q6052 Firmware Q6052 E Firmware Q6054 Firmware Q6054 Mk Ii Firmware Q6054 E Firmware Q6054 E Mk Ii Firmware Q6055 Firmware Q6055 C Firmware Q6055 E Firmware Q6055 S Firmware Q6114 E Firmware Q6115 E Firmware Q6124 E Firmware Q6125 Le Firmware Q6128 E Firmware Q6155 E Firmware Q7401 Firmware Q7404 Firmware Q7406 Blade Firmware Q7411 Firmware Q7414 Blade Firmware Q7424 R Firmware Q7424 R Mk Ii Firmware Q7436 Blade Firmware Q8414 Lvs Firmware Q8631 E Firmware Q8632 E Firmware Q8641 E Firmware Q8642 E Firmware Q8655 Zle Firmware Q8665 E Firmware Q8665 Le Firmware Q8675 Ze Firmware Q8685 E Firmware Q8685 Le Firmware Q8721 E Firmware Q8722 E Firmware Q8741 E Firmware Q8741 Le Firmware Q8742 E Firmware Q8742 Le Firmware Q8742 E Zoom Firmware Q8742 Le Zoom Firmware V5914 Firmware V5915 Firmware Xf40 Q1765 Firmware Xf40 Q2901 Firmware Xf60 Q2901 Firmware Xp40 Q1765 Firmware Xp40 Q1942 Firmware Xp60 Q1765 Firmware D201 S Xpt Q6055 Firmware Command Injection

9.8

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Jun 26, 2018 - 18:29 nvd

CRITICAL 9.8

DescriptionNVD

An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.

AnalysisAI

An issue was discovered in multiple models of Axis IP Cameras. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as OS Command Injection (CWE-78), which allows attackers to execute arbitrary operating system commands on the host. An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection. Affected products include: Axis A1001 Firmware, Axis A8004-V Firmware, Axis A8105-E Firmware, Axis A9161 Firmware, Axis A9188 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Avoid passing user input to shell commands. Use language-specific APIs instead of shell execution. Apply strict input validation with allowlists.