{"id":"CVE-2018-12258","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-12258","generatedAt":"2026-10-29T01:54:25.502Z","title":"With physical access, an attacker can upgrade the firmware in under 60 seconds by inserting an SD card containing the firmware with name 'ezviz.dav' and rebooting.","description":"An issue was discovered on Momentum Axel 720P 5.1.8 devices. Custom Firmware Upgrade is possible via an SD Card. With physical access, an attacker can upgrade the firmware in under 60 seconds by inserting an SD card containing the firmware with name 'ezviz.dav' and rebooting.","published":"2018-06-12T18:29:01.000Z","lastModified":"2026-06-17T01:37:26.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":6.8,"severity":"MEDIUM","vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":[],"affected":["apollotechnologiesinc/momentum axel 720p firmware"],"epss":{"score":0.00446,"percentile":0.38651,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.45%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://rchase.com/downloads/momentum-iot-penetration-test-report.pdf","tags":["Exploit","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://rchase.com/downloads/momentum-iot-penetration-test-report.pdf","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-12258","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}