axis 2400 video server 2.20 vulnerabilities and exploits

(subscribe to this query)

AXIS 2400 Video Server 2.00 up to and including 2.33 allows remote malicious users to obtain sensitive information via an HTTP request to /support/messages, which displays the server's /var/log/messages file.

Axis 2400 Video Server 2.0 Axis 2400 Video Server 2.20 Axis 2401 Video Server 2.31 Axis 2401 Video Server 2.32 Axis 2401 Video Server 2.33 Axis 2400 Video Server 2.31 Axis 2400 Video Server 2.32 Axis 2400 Video Server 2.33 Axis 2401 Video Server 2.20

1 EDB exploit

Axis Network Camera 2.40 and previous versions, and Video Server 3.12 and previous versions, allows remote malicious users to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2) admin/systemlog.cgi, (3) admin/serverreport.cgi, and (4) admin/paramlist.c...

Directory traversal vulnerability in Axis Network Camera 2.40 and previous versions, and Video Server 3.12 and previous versions, allows remote malicious users to bypass authentication via a .. (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to c...

Axis Network Camera 2.40 and previous versions, and Video Server 3.12 and previous versions, allows remote malicious users to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query string to virtualinput.cgi.

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook