← Vulnerability feed

Vulnerability record · CVE-2018-10660 · published 26 June 2018

CVE-2018-10660: Axis IP Cameras shell command injection

Axis · A1001 Firmware

Multiple Axis IP camera models contain a shell command injection flaw (CWE-78). An unauthenticated remote attacker can inject operating system commands through the affected interface, which matters because these devices sit on the network edge and are often internet-exposed.

9.8 CVSS 3.0 Critical EPSS 82% · top 0.4% CWE-78 · OS command injection
9.8CVSS 3.0 base score, v2 10.0
82%EPSS exploitation probability, 30 days
NoNot in CISA KEV
150Affected product versions listed by NVD
8References, 4 tagged exploit
17 Jun 2026Last modified by NVD

Description

An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 18 September 2026. Confidence: medium.

critical priorityCVSS 9.8 with network, unauthenticated, no-interaction exploitation and public exploit code, though not in KEV.

What it is

Multiple Axis IP camera models contain a shell command injection flaw (CWE-78). An unauthenticated remote attacker can inject operating system commands through the affected interface, which matters because these devices sit on the network edge and are often internet-exposed.

Impact

Successful exploitation gives the attacker arbitrary command execution on the camera with the privileges of the vulnerable service, enabling full compromise of confidentiality, integrity and availability.

Attack surface

Reachable over the network with no authentication and no user interaction required, per the CVSS vector AV:N/AC:L/PR:N/UI:N. The description does not specify the exact endpoint or parameter used for injection.

Exploitation

Not listed in CISA KEV, but EPSS is very high (0.82082, 99.6th percentile) and multiple references are tagged Exploit, including a public Exploit-DB entry, indicating public exploit code exists.

What to do

  • Apply the Axis vendor advisory ACV-128401 fix or firmware update for all affected models; consult the Axis affected product list to confirm coverage.
  • Remove cameras from direct internet exposure and place them behind a firewall or VPN, restricting management and service ports to trusted networks.
  • Segment camera VLANs from general corporate and user networks to limit lateral movement after compromise.
  • Change default credentials and disable unused services where the firmware allows.
  • Monitor vendor advisories for these end-of-life or legacy models and plan replacement if no fix is available.

Detection

  • Inspect camera and web server logs for shell metacharacters (;, |, $(), backticks) in request parameters and URIs.
  • Alert on unexpected outbound connections or processes spawned by the camera service, such as shells or downloaders.
  • Monitor for anomalous authentication or command execution events on camera hosts and correlate with known exploit signatures.
  • Use network IDS rules targeting the public exploit for this CVE against camera management interfaces.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.

Affected products

150 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/ ExploitThird Party Advisory
https://www.axis.com/files/faq/Advisory_ACV-128401.pdf Vendor Advisory
https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf Vendor Advisory
https://www.exploit-db.com/exploits/45100/ ExploitThird Party AdvisoryVDB Entry
https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/ ExploitThird Party Advisory
https://www.axis.com/files/faq/Advisory_ACV-128401.pdf Vendor Advisory
https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf Vendor Advisory
https://www.exploit-db.com/exploits/45100/ ExploitThird Party AdvisoryVDB Entry

Track CVE-2018-10660 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-10661Axis IP Cameras access control bypassMultiple models of Axis IP Cameras contain an access control bypass, as reported by the vendor and third-party researchers. The flaw allows an unauth…EPSS 87%analysed9.8CVE-2018-10662Axis IP Cameras expose insecure interface allowing remote compromiseMultiple Axis IP camera models ship with an exposed insecure interface. The flaw is remotely reachable without authentication and, per the CVSS vecto…EPSS 80%analysed8.8CVE-2023-21406Axis a1001 firmware heap-based buffer overflow vulnerabilityAriel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in th…EPSS 0.31%7.5CVE-2018-10658Axis a1001 firmware memory buffer overflow vulnerabilityThere was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from …EPSS 1.5%7.5CVE-2018-10659Axis a1001 firmware memory buffer overflow vulnerabilityThere was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (cras…EPSS 1.8%7.5CVE-2018-10663Axis a1001 firmware information exposure vulnerabilityAn issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation.EPSS 1.5%7.5CVE-2018-10664Axis a1001 firmware memory buffer overflow vulnerabilityAn issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption.EPSS 1.5%6.5CVE-2023-21405Axis a1001 firmware vulnerabilityKnud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting tha…EPSS 0.30%

Source: NIST National Vulnerability Database (record CVE-2018-10660), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.