CVE-2018-10661
Axis A1001 Firmware ≤ 1.65.1
Public PoCHigh EPSS
CVSS Score v3
9.8
Click a component to see what it means
Raw vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.87
99.7th percentile
Summary
CVE-2018-10661 is a critical-severity an unspecified weakness vulnerability in Axis A1001 Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 0.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2018-2732
Vulnerability Data
An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
- CWE(s)
Related Threats
Likely ATT&CK TechniquesAI
Techniques this vulnerability likely enables, inferred from its description, weakness type, and attributed-actor tradecraft. Confidence is per-technique.
T1190 Exploit Public-Facing Application Initial Accessconfidence: HIGH
Bypass of access control on a public-facing IP camera directly enables exploitation of the exposed web/management interface.
inferred from description · MITRE ATT&CK Enterprise v19.0
CVEs Like This One
CVE-2018-10662Same product: Axis A1001
CVE-2018-10660Same product: Axis A1001
CVE-2023-5677Same product: Axis M3024-Lve
CVE-2023-21406Same product: Axis A1001
CVE-2023-21405Same product: Axis A1001
CVE-2025-12063Same vendor: Axis
CVE-2025-30027Same vendor: Axis
CVE-2025-6298Same vendor: Axis
CVE-2024-6979Same vendor: Axis
CVE-2025-30024Same vendor: Axis
Affected Assets
axis
a1001 firmware
≤ 1.65.1
axis
a8004-v firmware
≤ 1.65.2
axis
a8105-e firmware
≤ 1.65.2
axis
a9161 firmware
≤ 1.65.0
axis
a9188 firmware
≤ 1.65.0
axis
a9188-v firmware
≤ 1.65.0
axis
c1004-e firmware
≤ 1.81.040.1
axis
c2005 firmware
≤ 1.81.040.1
axis
c3003-e firmware
≤ 1.81.040.1
axis
c8033 firmware
≤ 1.81.040.1
+380 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.