Vulnerability Description
Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Abus | Tvip 10000 Firmware | - |
| Abus | Tvip 10000 | - |
| Abus | Tvip 10001 Firmware | - |
| Abus | Tvip 10001 | - |
| Abus | Tvip 10005 Firmware | - |
| Abus | Tvip 10005 | - |
| Abus | Tvip 10005A Firmware | - |
| Abus | Tvip 10005A | - |
| Abus | Tvip 10005B Firmware | - |
| Abus | Tvip 10005B | - |
| Abus | Tvip 10050 Firmware | - |
| Abus | Tvip 10050 | - |
| Abus | Tvip 10051 Firmware | - |
| Abus | Tvip 10051 | - |
| Abus | Tvip 10055A Firmware | - |
| Abus | Tvip 10055A | - |
| Abus | Tvip 10055B Firmware | - |
| Abus | Tvip 10055B | - |
| Abus | Tvip 10500 Firmware | - |
| Abus | Tvip 10500 | - |
Related Weaknesses (CWE)
References
- https://sec.maride.cc/posts/abus/#cve-2018-17559ExploitThird Party Advisory
- https://www.ccc.de/en/updates/2019/update-nicht-verfugbar-hersteller-nicht-zu-erThird Party Advisory
- https://sec.maride.cc/posts/abus/#cve-2018-17559ExploitThird Party Advisory
- https://www.ccc.de/en/updates/2019/update-nicht-verfugbar-hersteller-nicht-zu-erThird Party Advisory
FAQ
What is CVE-2018-17559?
CVE-2018-17559 is a vulnerability with a CVSS score of 7.5 (HIGH). Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras.
How severe is CVE-2018-17559?
CVE-2018-17559 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-17559?
Check the references section above for vendor advisories and patch information. Affected products include: Abus Tvip 10000 Firmware, Abus Tvip 10000, Abus Tvip 10001 Firmware, Abus Tvip 10001, Abus Tvip 10005 Firmware.