CVE-2018-17879
An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to...
CVE-2018-17879 is a critical vulnerability (CVSS 9.8) in Abus Tvip 10000 Firmware, published October 26, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 23.2%, the 97th percentile. No source names a fixed version.
An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system() as root. There are several injection points in various scripts.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system() as root. There are several injection points in various scripts.
- Record
CVE-2018-17879- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
CVE List No score
An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system() as root. There are several injection points in various scripts.
- Record
CVE-2018-17879- Updated
- 2026-11-02
EUVDEUVD-2018-9620 No score
An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system() as root. There are several injection points in various scripts.
- Record
EUVD-2018-9620- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rgg4-rgq7-84pp
An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to...
An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system() as root. There are several injection points in various scripts.
- Record
GHSA-rgg4-rgq7-84pp- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
Affected products
- abus tvip 10000 firmware
- abus tvip 10001 firmware
- abus tvip 10005 firmware
- abus tvip 10005a firmware
- abus tvip 10005b firmware
- abus tvip 10050 firmware
- abus tvip 10051 firmware
- abus tvip 10055a firmware
- abus tvip 10055b firmware
- abus tvip 10500 firmware
- abus tvip 10550 firmware
- abus tvip 11000 firmware
Show 35 moreShow less
- abus tvip 11050 firmware
- abus tvip 11500 firmware
- abus tvip 11501 firmware
- abus tvip 11502 firmware
- abus tvip 11550 firmware
- abus tvip 11551 firmware
- abus tvip 11552 firmware
- abus tvip 20000 firmware
- abus tvip 20050 firmware
- abus tvip 20500 firmware
- abus tvip 20550 firmware
- abus tvip 21000 firmware
- abus tvip 21050 firmware
- abus tvip 21500 firmware
- abus tvip 21501 firmware
- abus tvip 21502 firmware
- abus tvip 21550 firmware
- abus tvip 21551 firmware
- abus tvip 21552 firmware
- abus tvip 22500 firmware
- abus tvip 31000 firmware
- abus tvip 31001 firmware
- abus tvip 31050 firmware
- abus tvip 31500 firmware
- abus tvip 31501 firmware
- abus tvip 31550 firmware
- abus tvip 31551 firmware
- abus tvip 32500 firmware
- abus tvip 51500 firmware
- abus tvip 51550 firmware
- abus tvip 71500 firmware
- abus tvip 71501 firmware
- abus tvip 71550 firmware
- abus tvip 71551 firmware
- abus tvip 72500 firmware
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |