Abus
14 CVEs across 106 Abus products. Browse Abus vulnerabilities, severities, and proof-of-concept exploits.
Abus products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-17879 | Critical | 9.8 | 2023-10-26 | An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system() as root. There are several injection… |
CVE-2018-17878 | Critical | 9.8 | 2023-10-26 | Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted string sent to sprintf() function. |
CVE-2018-17559 | High | 7.5 | 2023-10-26 | Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras. |
CVE-2018-17558 | Critical | 9.8 | 2023-10-26 | Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP TVIP20050 LM.1.6.18, TVIP10051 LM.1.6… |
CVE-2018-16739 | High | 8.8 | 2023-10-26 | An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute cod… |
CVE-2023-26609 | High | 7.2 | 2023-02-27 | ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field. |
CVE-2020-28973 | High | 7.5 | 2021-04-21 | The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to properly authenticate some requests to its built-in HTTPS interface. Someone can use this… |
CVE-2020-14158 | Critical | 9.1 | 2020-07-30 | The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity of RF packets that are exchanged with a… |
CVE-2020-14157 | High | 8.1 | 2020-06-17 | The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys (R… |
CVE-2019-14261 | High | 7.5 | 2019-09-03 | An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient implementation of jamming detection, an attacker is able to suppress… |
CVE-2019-9861 | High | 8.1 | 2019-05-14 | Due to the use of an insecure RFID technology (MIFARE Classic), ABUS proximity chip keys (RFID tokens) of the ABUS Secvest FUAA50000 wireless alarm system can… |
CVE-2019-9860 | High | 7.5 | 2019-03-27 | Due to unencrypted signal communication and predictability of rolling codes, an attacker can "desynchronize" an ABUS Secvest wireless remote control (FUBE50014… |
CVE-2019-9863 | Critical | 9.8 | 2019-03-27 | Due to the use of an insecure algorithm for rolling codes in the ABUS Secvest wireless alarm system FUAA50000 3.01.01 and its remote controls FUBE50014 and FUB… |
CVE-2019-9862 | Medium | 6.5 | 2019-03-27 | An issue was discovered on ABUS Secvest wireless alarm system FUAA50000 3.01.01 in conjunction with Secvest remote control FUBE50014 or FUBE50015. Because "enc… |