How severe is CVE-2018-12258?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Vulnerability in Apollotechnologiesinc Momentum Axel 720p

CVE-2018-12258

An issue was discovered on Momentum Axel 720P 5.1.8 devices. Custom Firmware Upgrade is possible via an SD Card. With physical access, an attacker can upgrade the firmware in under 60 seconds by inserting an SD card containing the firmware with name 'ezviz.dav' and rebooting.

EPSS: 0.005 (37.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Apollotechnologiesinc Momentum_axel_720p
Apollotechnologiesinc Momentum_axel_720p_firmware — versions 5.1.8
N/a — versions n/a

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-12258?: CVE-2018-12258 is a medium-severity vulnerability in Apollotechnologiesinc Momentum Axel 720p. CVSS score: 6.8/10. Published 2018-06-12.
How severe is CVE-2018-12258?: Medium severity. CVSS v3 base score is 6.8 out of 10.