CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2018-16739
An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- abus:tvip_10000_firmware
- abus:tvip_10001_firmware
- abus:tvip_10005_firmware
- abus:tvip_10005a_firmware
- abus:tvip_10005b_firmware
- abus:tvip_10050_firmware
- abus:tvip_10051_firmware
- abus:tvip_10055a_firmware
- abus:tvip_10055b_firmware
- abus:tvip_10500_firmware
- abus:tvip_10550_firmware
- abus:tvip_11000_firmware
- abus:tvip_11050_firmware
- abus:tvip_11500_firmware
- abus:tvip_11501_firmware
- abus:tvip_11502_firmware
- abus:tvip_11550_firmware
- abus:tvip_11551_firmware
- abus:tvip_11552_firmware
- abus:tvip_20000_firmware
- abus:tvip_20050_firmware
- abus:tvip_20500_firmware
- abus:tvip_20550_firmware
- abus:tvip_21000_firmware
- abus:tvip_21050_firmware
- abus:tvip_21500_firmware
- abus:tvip_21501_firmware
- abus:tvip_21502_firmware
- abus:tvip_21550_firmware
- abus:tvip_21551_firmware
- abus:tvip_21552_firmware
- abus:tvip_22500_firmware
- abus:tvip_31000_firmware
- abus:tvip_31001_firmware
- abus:tvip_31050_firmware
- abus:tvip_31500_firmware
- abus:tvip_31501_firmware
- abus:tvip_31550_firmware
- abus:tvip_31551_firmware
- abus:tvip_32500_firmware
- abus:tvip_51500_firmware
- abus:tvip_51550_firmware
- abus:tvip_71500_firmware
- abus:tvip_71501_firmware
- abus:tvip_71550_firmware
- abus:tvip_71551_firmware
- abus:tvip_72500_firmware