Axis m7016 Firmware vulnerabilities

8 CVEs affecting Axis m7016 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-5677, published 2024-02-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-10661, published 2018-06-26. Critical severity, CVSS 9.8. EPSS: 86.5% chance of exploitation in the next 30 days. An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
CVE-2018-10660, published 2018-06-26. Critical severity, CVSS 9.8. EPSS: 82.1% chance of exploitation in the next 30 days. An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.
CVE-2018-10662, published 2018-06-26. Critical severity, CVSS 9.8. EPSS: 79.5% chance of exploitation in the next 30 days. An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.
CVE-2018-10659, published 2018-06-26. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result…
CVE-2018-10664, published 2018-06-26. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption.
CVE-2018-10658, published 2018-06-26. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code inside libdbus-send.so shared object or…
CVE-2018-10663, published 2018-06-26. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation.
CVE-2023-5677, published 2024-02-05. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Brandon Rothel from QED Secure Solutions and Sam Hanson of Dragos have found that the VAPIX API tcptest.cgi did not have a sufficient input validation allowing for a possible remote code execution.…