Strix
26.1K

CVE-2018-9158

UnknownEPSS 1.28%

Last modified

CVE-2018-9158 is a vulnerability of currently unknown severity. An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack, which leads to a response time delay. EPSS estimates a 1.28% chance of exploitation in the next 30 days.

Description

An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack, which leads to a response time delay. An attacker can use the hping3 tool to perform an IPv4 flood attack, and the services are interrupted from attack start to end.

Metrics

EPSS Probability
1.28%

66.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
AxisM1033-W Firmware5.40.5.1

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2018-9158?
An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack, which leads to a response time delay. An attacker can use the hping3 tool to perform an IPv4 flood attack, and the services are interrupted from attack start to end.
How severe is CVE-2018-9158?
Severity scoring for CVE-2018-9158 is pending analysis. The EPSS model estimates a 1.28% probability of exploitation in the next 30 days.
How do I fix CVE-2018-9158?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-9158?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST