M1033 W Firmware

Vendor:

First CVE: Apr 1, 2018 · Active for 8 years

9
Total CVEs
More Total CVEs than 88% of tracked products
9.0
Avg CVEs / Year
Higher CVE frequency than 95% of tracked products
8.3
Avg CVSS
Higher Avg CVSS than 75% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact M1033 W Firmware over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 1, 2018
8 years ago
Most Recent CVE
Jun 26, 2018
2,954 days ago

CVE Severity & Scoring

M1033 W Firmware9 CVEs
All CVEs353,173 CVEs
HighCritical
Attack Vector
Local0 (0.0%)
Network9 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (88.9%)
High1 (11.1%)
Unknown0 (0.0%)
User Interaction
None8 (88.9%)
Unknown0 (0.0%)
Required1 (11.1%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None9 (100.0%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (9 CVEs).

9 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
Jun 26, 20189.888NOYES
An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.
Jun 26, 20189.886NOYES
An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.
Jun 26, 20189.884NOYES
An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack, which leads to a response tim
Apr 1, 20187.524NONO
An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by ma
Apr 1, 20187.524NONO
An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption.
Jun 26, 20187.523NONO
There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command
Jun 26, 20187.523NONO
An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation.
Jun 26, 20187.519NONO
There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code inside libdbus-send.so sha
Jun 26, 20187.519NONO

Exploit Exposure

Signals from CVEs in this product scope (9 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
3 CVEs
33.3% of CVEs· 98th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
3 CVEs
33.3% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (9 CVEs).

Media Mentions

Signals from CVEs in this product scope (9 CVEs).

Top CNAs Publishing CVEs For M1033 W Firmware

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
5.40.5.127.52.3%00