SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2018-10662

There is an Exposed Insecure Interface.

EXPLOIT ✓CRITICAL 9.8EPSS 79.5%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 79.5%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.

Description

An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.

CVSS 3.0
9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
79.54% probability · 100th percentile
Public exploits
1 in Exploit-DB · verified · first 27 July 2018
CISA KEV
Not listed
Affected
axis/a1001 firmware · axis/a8004-v firmware · axis/a8105-e firmware · axis/a9161 firmware · axis/a9188 firmware · axis/a9188-v firmware · axis/c1004-e firmware · axis/c2005 firmware · axis/c3003-e firmware · axis/c8033 firmware · axis/companion bullet le firmware · axis/companion c360 firmware · axis/companion cube l firmware · axis/companion cube lw firmware · axis/companion dome v firmware · axis/companion dome wv firmware · axis/companion eye l firmware · axis/companion eye lve firmware · axis/companion recorder 4ch firmware · axis/companion recorder 8ch firmware · +40 more
Source
cve@mitre.org
EPSS trend
0%40%80%21 September 2026: 74.49%22 September 2026: 79.54%27 October 2026: 79.54%21 September 202627 October 2026

EPSS moved from 74.5% on 21 September 2026 to 79.5% on 27 October 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.

Public exploits (1)

Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.

EDB-IDTitleTypePublishedVerified
EDB-45100source ↗Axis Network Camera - .srv to parhand Remote Code Execution (Metasploit)linux · Metasploitremote27 July 2018yes

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.