This page lists publicly disclosed CVE vulnerabilities affecting axis m1033-w_firmware (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2018-10664 | An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption. | [email protected] | 7.5 | 1.52% | 2018-06-26 | 2026-06-16 |
| CVE-2018-10663 | An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation. | [email protected] | 7.5 | 1.47% | 2018-06-26 | 2026-06-16 |
| CVE-2018-10662 | An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface. | [email protected] | 9.8 | 79.75% | 2018-06-26 | 2026-06-16 |
| CVE-2018-10661 | An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control. | [email protected] | 9.8 | 86.68% | 2018-06-26 | 2026-06-16 |
| CVE-2018-10660 | An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection. | [email protected] | 9.8 | 82.15% | 2018-06-26 | 2026-06-16 |
| CVE-2018-10659 | There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction. | [email protected] | 7.5 | 1.79% | 2018-06-26 | 2026-06-16 |
| CVE-2018-10658 | There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code inside libdbus-send.so shared object or similar. | [email protected] | 7.5 | 1.52% | 2018-06-26 | 2026-06-16 |
| CVE-2018-9158 | An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack, which leads to a response time delay. An attacker can use the hping3 tool to perform an IPv4 flood attack, and the services are interrupted from attack start to end. | [email protected] | 7.5 | 1.28% | 2018-04-01 | 2026-06-16 |
| CVE-2018-9157 | An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server mod_include module with "<!--#exec cmd=" support. The file needs to include a specific string to meet the internal system architecture. After the webshell upload, an attacker can use the webshell to perform remote c | [email protected] | 7.5 | 3.22% | 2018-04-01 | 2026-06-16 |