Description
On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump feature does not properly validate input, which allows authenticated users to execute code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MOBOTIX | P3 | < MX-V4.7.2.18 | MX-V4.7.2.18 |
| MOBOTIX | Mx6 | < MX-V5.2.0.61 | MX-V5.2.0.61 |
Advisories 2
- BSI-2024-0002 Authenticated Remote Code Execution affects Mobotix P3 and Mx6 cameras BSI CERT-Bund (WID) · Nov 6, 2026
- ICSA-24-235-03 Authenticated Remote Code Execution affects Mobotix P3 and Mx6 cameras CISA ICS & IT advisories · Aug 22, 2024