CVE-2018-10658

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-06-26 · updated 2026-06-17
Weakness: CWE-119

Description

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code inside libdbus-send.so shared object or similar.

Affected products

Axis Communications AB AXIS A1001 Network Door Controller: before 1.65.1 — fixed in 1.65.1
Axis A8004-V Firmware: before 1.65.2 — fixed in 1.65.2
Axis A8105-E Firmware: before 1.65.2 — fixed in 1.65.2
Axis A9161 Firmware: before 1.65.0 — fixed in 1.65.0
Axis A9188-V Firmware: before 1.65.0 — fixed in 1.65.0
Axis A9188 Firmware: before 1.65.0 — fixed in 1.65.0
Axis C1004-E Firmware: before 1.81.040.1 — fixed in 1.81.040.1
Axis C2005 Firmware: before 1.81.040.1 — fixed in 1.81.040.1
Axis C3003-E Firmware: before 1.81.040.1 — fixed in 1.81.040.1
Axis C8033 Firmware: before 1.81.040.1 — fixed in 1.81.040.1
Axis Companion Bullet Le Firmware: before 8.20.1 — fixed in 8.20.1
Axis Companion C360 Firmware: before 7.15.2.3 — fixed in 7.15.2.3
Axis Companion Cube L Firmware: before 8.20.1 — fixed in 8.20.1
Axis Companion Cube Lw Firmware: before 8.20.1 — fixed in 8.20.1
Axis Companion Dome V Firmware: before 8.20.1 — fixed in 8.20.1
Axis Companion Dome Wv Firmware: before 8.20.1 — fixed in 8.20.1
Axis Companion Eye L Firmware: before 8.20.1 — fixed in 8.20.1
Axis Companion Eye Lve Firmware: before 8.20.1 — fixed in 8.20.1
Axis Companion Recorder 4Ch Firmware: before 1.20.1 — fixed in 1.20.1
Axis Companion Recorder 8Ch Firmware: before 1.20.1 — fixed in 1.20.1
Axis D201-S Xpt Q6055 Firmware: before 6.50.2.3 — fixed in 6.50.2.3
Axis D2050-Ve Firmware: before 7.35.4.2 — fixed in 7.35.4.2
Axis F34 Main Unit Firmware: before 6.50.2.3 — fixed in 6.50.2.3
Axis F41 Main Unit Firmware: before 6.50.2.3 — fixed in 6.50.2.3
Axis F44 Dual Audio Input Firmware: before 6.50.2.3 — fixed in 6.50.2.3
Axis F44 Main Unit Firmware: before 6.50.2.3 — fixed in 6.50.2.3
Axis Fa54 Main Unit Firmware: before 6.55.4.5 — fixed in 6.55.4.5
Axis M1004-W Firmware: before 5.51.5 — fixed in 5.51.5
Axis M1013 Firmware: before 5.51.5 — fixed in 5.51.5
Axis M1014 Firmware: before 5.51.5 — fixed in 5.51.5

How to fix

Upgrade to a fixed version: Axis Communications AB AXIS A1001 Network Door Controller 1.65.1; Axis A8004-V Firmware 1.65.2; Axis A8105-E Firmware 1.65.2; Axis A9161 Firmware 1.65.0; Axis A9188-V Firmware 1.65.0; Axis A9188 Firmware 1.65.0; Axis C1004-E Firmware 1.81.040.1; Axis C2005 Firmware 1.81.040.1; Axis C3003-E Firmware 1.81.040.1; Axis C8033 Firmware 1.81.040.1; Axis Companion Bullet Le Firmware 8.20.1; Axis Companion C360 Firmware 7.15.2.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-10658 or the next vulnerability affects your stack