CVE-2018-17559
26.10.2023, 22:15
Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras.
| Vendor | Product | Version |
|---|---|---|
| abus | tvip_10000_firmware | - |
| abus | tvip_10001_firmware | - |
| abus | tvip_10005_firmware | - |
| abus | tvip_10005a_firmware | - |
| abus | tvip_10005b_firmware | - |
| abus | tvip_10050_firmware | - |
| abus | tvip_10051_firmware | - |
| abus | tvip_10055a_firmware | - |
| abus | tvip_10055b_firmware | - |
| abus | tvip_10500_firmware | - |
| abus | tvip_10550_firmware | - |
| abus | tvip_11000_firmware | - |
| abus | tvip_11050_firmware | - |
| abus | tvip_11500_firmware | - |
| abus | tvip_11501_firmware | - |
| abus | tvip_11502_firmware | - |
| abus | tvip_11550_firmware | - |
| abus | tvip_11551_firmware | - |
| abus | tvip_11552_firmware | - |
| abus | tvip_20000_firmware | - |
| abus | tvip_20050_firmware | - |
| abus | tvip_20500_firmware | - |
| abus | tvip_20550_firmware | - |
| abus | tvip_21000_firmware | - |
| abus | tvip_21050_firmware | - |
| abus | tvip_21500_firmware | - |
| abus | tvip_21501_firmware | - |
| abus | tvip_21502_firmware | - |
| abus | tvip_21550_firmware | - |
| abus | tvip_21551_firmware | - |
| abus | tvip_21552_firmware | - |
| abus | tvip_22500_firmware | - |
| abus | tvip_31000_firmware | - |
| abus | tvip_31001_firmware | - |
| abus | tvip_31050_firmware | - |
| abus | tvip_31500_firmware | - |
| abus | tvip_31501_firmware | - |
| abus | tvip_31550_firmware | - |
| abus | tvip_31551_firmware | - |
| abus | tvip_32500_firmware | - |
| abus | tvip_51500_firmware | - |
| abus | tvip_51550_firmware | - |
| abus | tvip_71500_firmware | - |
| abus | tvip_71501_firmware | - |
| abus | tvip_71550_firmware | - |
| abus | tvip_71551_firmware | - |
| abus | tvip_72500_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-59 - Improper Link Resolution Before File Access ('Link Following')The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
- CWE-284 - Improper Access ControlThe software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.