EDB-45100

functional

Axis Network Camera - .srv to parhand Remote Code Execution (Metasploit)

view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2018-07-27catalog exploit_db

exploited CVEs (3)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-10662US	critical9.8	79.5% (100th)	Exploit	2018-06-26
An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.
CVE-2018-10661US	critical9.8	86.5% (100th)	Exploit	2018-06-26
An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
CVE-2018-10660US	critical9.8	82.1% (100th)	Exploit	2018-06-26
An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.