← Vulnerability feed

Vulnerability record · CVE-2018-10659 · published 26 June 2018

CVE-2018-10659: Axis a1001 firmware memory buffer overflow vulnerability

Axis · A1001 Firmware

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction.

7.5 CVSS 3.0 High EPSS 1.8% · top 22.5% CWE-119 · Memory buffer overflow
7.5CVSS 3.0 base score, v2 5.0
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
150Affected product versions listed by NVD
6References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

150 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/ ExploitThird Party Advisory
https://www.axis.com/files/faq/Advisory_ACV-128401.pdf Vendor Advisory
https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf Vendor Advisory
https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/ ExploitThird Party Advisory
https://www.axis.com/files/faq/Advisory_ACV-128401.pdf Vendor Advisory
https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf Vendor Advisory

Track CVE-2018-10659 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-10660Axis IP Cameras shell command injectionMultiple Axis IP camera models contain a shell command injection flaw (CWE-78). An unauthenticated remote attacker can inject operating system comman…EPSS 82%analysed9.8CVE-2018-10661Axis IP Cameras access control bypassMultiple models of Axis IP Cameras contain an access control bypass, as reported by the vendor and third-party researchers. The flaw allows an unauth…EPSS 87%analysed9.8CVE-2018-10662Axis IP Cameras expose insecure interface allowing remote compromiseMultiple Axis IP camera models ship with an exposed insecure interface. The flaw is remotely reachable without authentication and, per the CVSS vecto…EPSS 80%analysed8.8CVE-2023-21406Axis a1001 firmware heap-based buffer overflow vulnerabilityAriel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in th…EPSS 0.31%7.5CVE-2018-10658Axis a1001 firmware memory buffer overflow vulnerabilityThere was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from …EPSS 1.5%7.5CVE-2018-10663Axis a1001 firmware information exposure vulnerabilityAn issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation.EPSS 1.5%7.5CVE-2018-10664Axis a1001 firmware memory buffer overflow vulnerabilityAn issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption.EPSS 1.5%6.5CVE-2023-21405Axis a1001 firmware vulnerabilityKnud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting tha…EPSS 0.30%

Source: NIST National Vulnerability Database (record CVE-2018-10659), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.