Axis p1354 Firmware vulnerabilities

8 CVEs affecting Axis p1354 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-10664, published 2018-06-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-10661, published 2018-06-26. Critical severity, CVSS 9.8. EPSS: 86.5% chance of exploitation in the next 30 days. An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
CVE-2018-10660, published 2018-06-26. Critical severity, CVSS 9.8. EPSS: 82.1% chance of exploitation in the next 30 days. An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.
CVE-2018-10662, published 2018-06-26. Critical severity, CVSS 9.8. EPSS: 79.5% chance of exploitation in the next 30 days. An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.
CVE-2018-9156, published 2018-04-01. High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days. An issue was discovered on AXIS P1354 (IP camera) Firmware version 5.90.1.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a…
CVE-2018-10659, published 2018-06-26. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result…
CVE-2018-10664, published 2018-06-26. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption.
CVE-2018-10658, published 2018-06-26. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code inside libdbus-send.so shared object or…
CVE-2018-10663, published 2018-06-26. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation.