axis 250s video server vulnerabilities and exploits

(subscribe to this query)

The web-based administration capability for various Axis Network Camera products allows remote malicious users to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).

Axis 2110 Network Camera Axis 2120 Network Camera Axis 2100 Network Camera Axis 250s Video Server Axis 2130 Ptz Network Camera Axis 2400 Video Server Axis 2401 Video Server Axis 2420 Network Camera Axis 2460 Network Dvr

1 EDB exploit

Axis Network Camera 2.40 and previous versions, and Video Server 3.12 and previous versions, allows remote malicious users to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2) admin/systemlog.cgi, (3) admin/serverreport.cgi, and (4) admin/paramlist.c...

Directory traversal vulnerability in Axis Network Camera 2.40 and previous versions, and Video Server 3.12 and previous versions, allows remote malicious users to bypass authentication via a .. (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to c...

Axis Network Camera 2.40 and previous versions, and Video Server 3.12 and previous versions, allows remote malicious users to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query string to virtualinput.cgi.

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook