Skip to content
OpenAdvisories
High BSI-2024-0002 1 CVE

Authenticated Remote Code Execution affects Mobotix P3 and Mx6 cameras

Published Aug 22, 2024 · Updated Nov 6, 2026 · Revision 3

Vendor: Mobotix Product: c25 Product: c26 Product: D14Di Product: D15Di Product: D16 Product: D24M Product: D25M Product: D26 Product: i25 Product: i26 Product: M15 Product: M15-Thermal Product: M16 Product: M24M Product: M25M Product: M26 Product: Mx6 Firmware Product: p25 Product: p26 Product: P3 Firmware Product: Q24M Product: Q25M Product: Q26 Product: S14 Product: S15 Product: S16 Product: S26 Product: T24M Product: T25M +6 more

Summary

A vulnerability was found in Mobotix P3 and Mx6 cameras that allows a logged-in attacker to execute arbitrary commands with system rights.

Product

Mobotix P3 and Mx6 families are cameras that are primarily used in the area of property protection and building security.

Vulnerabilities 1

  • High 8.7
    CVE-2023-34873

    On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump feature does not properly va…

    Mobotix Mx6 P3

Revision history

  1. #3

    Corrected revision history.

  2. #2

    Add reference to CISA advisory, add CISA advisory ID as alias

  3. #1

    Initial version.

References