CVE-2018-16739
An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin...
CVE-2018-16739 is a high vulnerability (CVSS 8.8) in Abus Tvip 10000 Firmware, published October 26, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.14%, the 66th percentile. No source names a fixed version.
An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges.
- Record
CVE-2018-16739- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List
An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges.
- Record
CVE-2018-16739- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-22
- Updated
- 2026-11-02
EUVDEUVD-2018-8539
An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges.
- Record
EUVD-2018-8539- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2228-5m6x-4rqm
An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin...
An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges.
- Record
GHSA-2228-5m6x-4rqm- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
- abus tvip 10000 firmware
- abus tvip 10001 firmware
- abus tvip 10005 firmware
- abus tvip 10005a firmware
- abus tvip 10005b firmware
- abus tvip 10050 firmware
- abus tvip 10051 firmware
- abus tvip 10055a firmware
- abus tvip 10055b firmware
- abus tvip 10500 firmware
- abus tvip 10550 firmware
- abus tvip 11000 firmware
Show 35 moreShow less
- abus tvip 11050 firmware
- abus tvip 11500 firmware
- abus tvip 11501 firmware
- abus tvip 11502 firmware
- abus tvip 11550 firmware
- abus tvip 11551 firmware
- abus tvip 11552 firmware
- abus tvip 20000 firmware
- abus tvip 20050 firmware
- abus tvip 20500 firmware
- abus tvip 20550 firmware
- abus tvip 21000 firmware
- abus tvip 21050 firmware
- abus tvip 21500 firmware
- abus tvip 21501 firmware
- abus tvip 21502 firmware
- abus tvip 21550 firmware
- abus tvip 21551 firmware
- abus tvip 21552 firmware
- abus tvip 22500 firmware
- abus tvip 31000 firmware
- abus tvip 31001 firmware
- abus tvip 31050 firmware
- abus tvip 31500 firmware
- abus tvip 31501 firmware
- abus tvip 31550 firmware
- abus tvip 31551 firmware
- abus tvip 32500 firmware
- abus tvip 51500 firmware
- abus tvip 51550 firmware
- abus tvip 71500 firmware
- abus tvip 71501 firmware
- abus tvip 71550 firmware
- abus tvip 71551 firmware
- abus tvip 72500 firmware
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |