MOBOTIX P3 and Mx6 Cameras Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in MOBOTIX P3 cameras running versions prior to MX-V4.7.2.18 and Mx6 cameras running versions prior to MX-V5.2.0.61. The vulnerability arises because the tcpdump feature fails to properly validate input, allowing authenticated users to execute arbitrary code.

Impact

Exploitation of this vulnerability could allow an authenticated attacker to execute code remotely on the affected camera.

Remediation

Users are advised to update P3 cameras to version MX-V4.7.2.18 or later, and Mx6 cameras to version MX-V5.2.0.61 or later. Additional guidance on updating these cameras is available on the MOBOTIX website.