CVE-2018-16739

Name: CVE-2018-16739
Creator: NVD / NIST
Published: 2023-10-26T22:15:08.333+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 8.8/10EPSS 1.03%

Last modified Jun 17, 2026

CVE-2018-16739 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges.. EPSS estimates a 1.03% chance of exploitation in the next 30 days.

Description

An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges.

Metrics

CVSS 3.1

8.8/10

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

1.03%

59.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Abus	Tvip 10000 Firmware	All versions
Abus	Tvip 10001 Firmware	All versions
Abus	Tvip 10005 Firmware	All versions
Abus	Tvip 10005a Firmware	All versions
Abus	Tvip 10005b Firmware	All versions
Abus	Tvip 10050 Firmware	All versions
Abus	Tvip 10051 Firmware	All versions
Abus	Tvip 10055a Firmware	All versions
Abus	Tvip 10055b Firmware	All versions
Abus	Tvip 10500 Firmware	All versions
Abus	Tvip 10550 Firmware	All versions
Abus	Tvip 11000 Firmware	All versions
Abus	Tvip 11050 Firmware	All versions
Abus	Tvip 11500 Firmware	All versions
Abus	Tvip 11501 Firmware	All versions
Abus	Tvip 11502 Firmware	All versions
Abus	Tvip 11550 Firmware	All versions
Abus	Tvip 11551 Firmware	All versions
Abus	Tvip 11552 Firmware	All versions
Abus	Tvip 20000 Firmware	All versions
Abus	Tvip 20050 Firmware	All versions
Abus	Tvip 20500 Firmware	All versions
Abus	Tvip 20550 Firmware	All versions
Abus	Tvip 21000 Firmware	All versions
Abus	Tvip 21050 Firmware	All versions
Abus	Tvip 21500 Firmware	All versions
Abus	Tvip 21501 Firmware	All versions
Abus	Tvip 21502 Firmware	All versions
Abus	Tvip 21550 Firmware	All versions
Abus	Tvip 21551 Firmware	All versions
Abus	Tvip 21552 Firmware	All versions
Abus	Tvip 22500 Firmware	All versions
Abus	Tvip 31000 Firmware	All versions
Abus	Tvip 31001 Firmware	All versions
Abus	Tvip 31050 Firmware	All versions
Abus	Tvip 31500 Firmware	All versions
Abus	Tvip 31501 Firmware	All versions
Abus	Tvip 31550 Firmware	All versions
Abus	Tvip 31551 Firmware	All versions
Abus	Tvip 32500 Firmware	All versions
Abus	Tvip 51500 Firmware	All versions
Abus	Tvip 51550 Firmware	All versions
Abus	Tvip 71500 Firmware	All versions
Abus	Tvip 71501 Firmware	All versions
Abus	Tvip 71550 Firmware	All versions
Abus	Tvip 71551 Firmware	All versions
Abus	Tvip 72500 Firmware	All versions

References

https://sec.maride.cc/posts/abus/Exploit, Third Party Advisory
https://www.ccc.de/en/updates/2019/update-nicht-verfugbar-hersteller-nicht-zu-erreichenThird Party Advisory
https://sec.maride.cc/posts/abus/Exploit, Third Party Advisory
https://www.ccc.de/en/updates/2019/update-nicht-verfugbar-hersteller-nicht-zu-erreichenThird Party Advisory

Timeline

Published: Oct 26, 2023
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-16739?

An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges.

How severe is CVE-2018-16739?

CVE-2018-16739 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 1.03% probability of exploitation in the next 30 days.

How do I fix CVE-2018-16739?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-16739?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST