VulnerabilityModified

CVE-2018-12258

With physical access, an attacker can upgrade the firmware in under 60 seconds by inserting an SD card containing the firmware with name 'ezviz.dav' and rebooting.

MEDIUM 6.8EPSS 0.45%

Does this matter?

Lower severity and a low EPSS score (0.45%). Track it; it rarely justifies an emergency change on its own.

Description

An issue was discovered on Momentum Axel 720P 5.1.8 devices. Custom Firmware Upgrade is possible via an SD Card. With physical access, an attacker can upgrade the firmware in under 60 seconds by inserting an SD card containing the firmware with name 'ezviz.dav' and rebooting.

CVSS 3.0: 6.8 MEDIUMCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.45% probability · 38th percentile
CISA KEV: Not listed
Affected: apollotechnologiesinc/momentum axel 720p firmware
Source: cve@mitre.org

References

https://rchase.com/downloads/momentum-iot-penetration-test-report.pdfExploit, Third Party Advisory
https://rchase.com/downloads/momentum-iot-penetration-test-report.pdfExploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.