<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: tvip 10050 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2018-17879: An issue was discovered on certain ABUS TVIP cameras</title><link>https://patchthecve.com/cve/CVE-2018-17879.html</link><guid>https://patchthecve.com/cve/CVE-2018-17879.html</guid><pubDate>Wed, 17 Jun 2026 01:46:27 +0000</pubDate><description>CRITICAL 9.8: An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system() as root. There are several injection points in various scripts.</description></item><item><title>CVE-2018-17878: Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via</title><link>https://patchthecve.com/cve/CVE-2018-17878.html</link><guid>https://patchthecve.com/cve/CVE-2018-17878.html</guid><pubDate>Wed, 17 Jun 2026 01:46:27 +0000</pubDate><description>CRITICAL 9.8: Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted string sent to sprintf() function.</description></item><item><title>CVE-2018-17559: Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of cer</title><link>https://patchthecve.com/cve/CVE-2018-17559.html</link><guid>https://patchthecve.com/cve/CVE-2018-17559.html</guid><pubDate>Wed, 17 Jun 2026 01:46:00 +0000</pubDate><description>HIGH 7.5: Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras.</description></item><item><title>CVE-2018-17558: Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on</title><link>https://patchthecve.com/cve/CVE-2018-17558.html</link><guid>https://patchthecve.com/cve/CVE-2018-17558.html</guid><pubDate>Wed, 17 Jun 2026 01:46:00 +0000</pubDate><description>CRITICAL 9.8: Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP TVIP20050 LM.1.6.18, TVIP10051 LM.1.6.18, TVIP11050 MG.1.6.03.05, TVIP20550 LM.1.6.18, TVIP10050 LM.1.6.18, TVIP11550 MG.1.6.03, TVIP21050 MG.1.6.03, and TVIP51550 MG.1.6.03 camer</description></item><item><title>CVE-2018-16739: An issue was discovered on certain ABUS TVIP devices</title><link>https://patchthecve.com/cve/CVE-2018-16739.html</link><guid>https://patchthecve.com/cve/CVE-2018-16739.html</guid><pubDate>Wed, 17 Jun 2026 01:44:44 +0000</pubDate><description>HIGH 8.8: An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges.</description></item></channel></rss>