An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.

An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The firmware version running on the remote host is vulnerable to multiple vulnerabilities. An unauthenticated remote attacker could gain system-level unauthorized access to the affected device.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
501935	Axis Communications Multiple IP Cameras Bypass of Access Control (CVE-2018-10661)	Tenable OT Security	Tenable.ot	Remote	critical
117882	AXIS Multiple Vulnerabilities (ACV-128401)	Nessus	Misc.	Remote	critical

Detections

Analytics

CVE-2018-10661

critical

Tenable Plugins

critical

critical