Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

axis 2420 network camera vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2007-2239
Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control prior to 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote malicious users to...
Axis 2120 Network CameraAxis 2130 Ptz Network CameraAxis 2100 Network CameraAxis 2110 Network CameraAxis Panorama Ptz CameraAxis 2411 Video ServerAxis 2420-ir Network CameraAxis 2420 Network CameraAxis 2400 Video ServerAxis 2401 Video Server
NA
CVE-2004-2427
Axis Network Camera 2.40 and previous versions, and Video Server 3.12 and previous versions, allows remote malicious users to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2) admin/systemlog.cgi, (3) admin/serverreport.cgi, and (4) admin/paramlist.c...
Axis 2100 Network Camera 2.12Axis 2100 Network Camera 2.30Axis 2100 Network Camera 2.31Axis 2100 Network Camera 2.32Axis 2120 Network Camera 2.31Axis 2120 Network Camera 2.32Axis 2120 Network Camera 2.34Axis 2120 Network Camera 2.40Axis 2400 Video Server 2.0Axis 2400 Video Server 2.20Axis 2400 Video Server 2.30Axis 2400 Video Server 2.31Axis 2401 Video Server 2.34Axis 2401 Video Server 3.12Axis 2401 Video Server 3.13Axis 2411 Video Server 3.12Axis 2411 Video Server 3.13Axis 2460 Network Dvr 3.11Axis 2490 Serial ServerAxis 2490 Serial Server 2.11.3Axis 250s Video ServerAxis 2110 Network Camera 2.30
NA
CVE-2004-2426
Directory traversal vulnerability in Axis Network Camera 2.40 and previous versions, and Video Server 3.12 and previous versions, allows remote malicious users to bypass authentication via a .. (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to c...
Axis 2100 Network Camera 2.12Axis 2110 Network Camera 2.12Axis 2110 Network Camera 2.30Axis 2120 Network Camera 2.30Axis 2120 Network Camera 2.31Axis 2130 Ptz Network Camera 2.32Axis 2130 Ptz Network Camera 2.34Axis 2400 Video Server 1.2Axis 2400 Video Server 2.0Axis 2400 Video Server 3.11Axis 2400 Video Server 3.12Axis 2401 Video Server 2.33Axis 2401 Video Server 2.34Axis 2420 Network Camera 2.32Axis 2420 Network Camera 2.33Axis 2460 Network Dvr 3.10Axis 2460 Network Dvr 3.11Axis 2100 Network Camera 2.32Axis 2100 Network Camera 2.33Axis 2110 Network Camera 2.34Axis 2110 Network Camera 2.40Axis 2120 Network Camera 2.40
NA
CVE-2004-2425
Axis Network Camera 2.40 and previous versions, and Video Server 3.12 and previous versions, allows remote malicious users to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query string to virtualinput.cgi.
Axis 2100 Network Camera 2.30Axis 2100 Network Camera 2.31Axis 2110 Network Camera 2.30Axis 2110 Network Camera 2.31Axis 2110 Network Camera 2.32Axis 2120 Network Camera 2.32Axis 2120 Network Camera 2.34Axis 2130 Ptz Network Camera 2.40Axis 2100 Network Camera 2.12Axis 2100 Network Camera 2.41Axis 2110 Network Camera 2.12Axis 2120 Network Camera 2.30Axis 2120 Network Camera 2.31Axis 2130 Ptz Network Camera 2.32Axis 2130 Ptz Network Camera 2.34Axis 2400 Video Server 1.15Axis 2400 Video Server 1.2Axis 2400 Video Server 3.11Axis 2400 Video Server 3.12Axis 2401 Video Server 2.33Axis 2401 Video Server 2.34Axis 2420 Network Camera 2.31
NA
CVE-2003-0240
The web-based administration capability for various Axis Network Camera products allows remote malicious users to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).
Axis 2110 Network CameraAxis 2120 Network CameraAxis 2100 Network CameraAxis 250s Video ServerAxis 2130 Ptz Network CameraAxis 2400 Video ServerAxis 2401 Video ServerAxis 2420 Network CameraAxis 2460 Network Dvr
NA
CVE-2004-0789
Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and previous versions as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x prior to 2.2.3 and 3.5.x prior to 3.5.2, allow remote malicious users to cause a ...
Delegate Delegate 7.8.1Delegate Delegate 7.8.2Delegate Delegate 8.9.1Delegate Delegate 8.9.2Dnrd Dnrd 1.3Dnrd Dnrd 1.4Dnrd Dnrd 2.0Dnrd Dnrd 2.6Dnrd Dnrd 2.7Don Moore Mydns 0.9Maradns Maradns 0.5.28Posadis Posadis 0.50.6Posadis Posadis 0.50.7Qbik Wingate 3.0Qbik Wingate 4.0.1Delegate Delegate 7.7.1Delegate Delegate 7.8.0Delegate Delegate 8.5.0Delegate Delegate 8.9Dnrd Dnrd 1.1Dnrd Dnrd 1.2Dnrd Dnrd 2.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook