VYPR

P1354

by Axis

CVEs (1)

  • CVE-2018-9156HigApr 1, 2018
    risk 0.49cvss 7.5epss 0.04

    An issue was discovered on AXIS P1354 (IP camera) Firmware version 5.90.1.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP…