Priority MEDIUM 40
On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump feature does not properly validate input, which allows authenticated users to execute code.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00494 · Published 2025-05-23 · Fixed in MX-V4.7.2.18, MX-V5.2.0.61 CWE-78
Priority LOW 31
A vulnerability was found in Mobotix M15 4.3.4.83 and classified as problematic.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00404 · Published 2025-01-19 · No fix listed CWE-79
Priority LOW 39
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00498 · Published 2024-12-30 · No fix listed CWE-79
Priority MEDIUM 40
Mobotix Control Center (MxCC) through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0107 · Published 2022-05-19 · No fix listed CWE-522
Priority MEDIUM 40
There is a lack of CSRF countermeasures on MOBOTIX S14 MX-V4.2.1.61 cameras, as demonstrated by adding an admin account via the /admin/access URI.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00814 · Published 2019-05-31 · No fix listed CWE-352
Priority LOW 35
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01057 · Published 2019-02-09 · No fix listed CWE-319
Priority MEDIUM 45
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01345 · Published 2019-02-09 · No fix listed CWE-521
Priority LOW 35
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.009 · Published 2019-02-09 · No fix listed CWE-327
Priority MEDIUM 47
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02337 · Published 2019-02-09 · No fix listed CWE-798
Priority LOW 25
Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other versions before 2.2.3.18 for M10/D10 and 3.0.3.31 for M22, allow remote attackers to inject arbitrar…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02952 · Published 2006-05-19 · No fix listed CWE-79
THREATIST.IORead the docs