{"id":"CVE-2018-10660","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-10660","generatedAt":"2026-10-28T19:19:32.734Z","title":"There is Shell Command Injection.","description":"An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.","published":"2018-06-26T18:29:00.000Z","lastModified":"2026-06-17T01:34:26.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-78"],"affected":["axis/a1001 firmware","axis/a8004-v firmware","axis/a8105-e firmware","axis/a9161 firmware","axis/a9188 firmware","axis/a9188-v firmware","axis/c1004-e firmware","axis/c2005 firmware","axis/c3003-e firmware","axis/c8033 firmware","axis/companion bullet le firmware","axis/companion c360 firmware","axis/companion cube l firmware","axis/companion cube lw firmware","axis/companion dome v firmware","axis/companion dome wv firmware","axis/companion eye l firmware","axis/companion eye lve firmware","axis/companion recorder 4ch firmware","axis/companion recorder 8ch firmware","axis/d2050-ve firmware","axis/f34 main unit firmware","axis/f41 main unit firmware","axis/f44 dual audio input firmware","axis/f44 main unit firmware","axis/fa54 main unit firmware","axis/m1004-w firmware","axis/m1013 firmware","axis/m1014 firmware","axis/m1025 firmware","axis/m1033-w firmware","axis/m1034-w firmware","axis/m1045-lw firmware","axis/m1054 firmware","axis/m1065-l firmware","axis/m1065-lw firmware","axis/m1103 firmware","axis/m1104 firmware","axis/m1113 firmware","axis/m1113-e firmware","axis/m1114 firmware","axis/m1114-e firmware","axis/m1124 firmware","axis/m1124-e firmware","axis/m1125 firmware","axis/m1125-e firmware","axis/m1143-l firmware","axis/m1144-l firmware","axis/m1145 firmware","axis/m1145-l firmware","axis/m2014-e firmware","axis/m2025-le firmware","axis/m2026-le firmware","axis/m2026-le mk ii firmware","axis/m3004-v firmware","axis/m3005-v firmware","axis/m3006-v firmware","axis/m3007-p firmware","axis/m3007-pv firmware","axis/m3014 firmware"],"epss":{"score":0.82082,"percentile":0.99651,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.77449,"percentile":0.9955},{"date":"2026-09-22","score":0.82082,"percentile":0.99638}]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2018-07-27","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":45100,"kind":"exploit","title":"Axis Network Camera - .srv to parhand Remote Code Execution (Metasploit)","url":"https://www.exploit-db.com/exploits/45100","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/45100.rb","file":"exploits/linux/remote/45100.rb","published":"2018-07-27","added":"2018-07-27","updated":"2018-08-01","author":"Metasploit","type":"remote","platform":"linux","port":80,"verified":true,"codes":["CVE-2018-10662","CVE-2018-10661","CVE-2018-10660"],"tags":"Remote","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://raw.githubusercontent.com/rapid7/metasploit-framework/6c2e8f240291240caec28d24119031e06e4738ad/modules/exploits/linux/http/axis_srv_parhand_rce.rb"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 82.1%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/","tags":["Exploit","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.axis.com/files/faq/Advisory_ACV-128401.pdf","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/45100/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.axis.com/files/faq/Advisory_ACV-128401.pdf","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/45100/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-10660","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}