CVE-2018-16739: Abus Tvip 10000 Firmware

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges.

Affected products

• Abus Tvip 10000 Firmware: affected versions not specified
• Abus Tvip 10001 Firmware: affected versions not specified
• Abus Tvip 10005 Firmware: affected versions not specified
• Abus Tvip 10005a Firmware: affected versions not specified
• Abus Tvip 10005b Firmware: affected versions not specified
• Abus Tvip 10050 Firmware: affected versions not specified
• Abus Tvip 10051 Firmware: affected versions not specified
• Abus Tvip 10055a Firmware: affected versions not specified
• Abus Tvip 10055b Firmware: affected versions not specified
• Abus Tvip 10500 Firmware: affected versions not specified
• Abus Tvip 10550 Firmware: affected versions not specified
• Abus Tvip 11000 Firmware: affected versions not specified
• Abus Tvip 11050 Firmware: affected versions not specified
• Abus Tvip 11500 Firmware: affected versions not specified
• Abus Tvip 11501 Firmware: affected versions not specified
• Abus Tvip 11502 Firmware: affected versions not specified
• Abus Tvip 11550 Firmware: affected versions not specified
• Abus Tvip 11551 Firmware: affected versions not specified
• Abus Tvip 11552 Firmware: affected versions not specified
• Abus Tvip 20000 Firmware: affected versions not specified
• Abus Tvip 20050 Firmware: affected versions not specified
• Abus Tvip 20500 Firmware: affected versions not specified
• Abus Tvip 20550 Firmware: affected versions not specified
• Abus Tvip 21000 Firmware: affected versions not specified
• Abus Tvip 21050 Firmware: affected versions not specified
• and 22 more

Published 2023-10-26. Last modified 2026-06-17.