axis 2100 network camera vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware prior to 2.43 allow remote malicious users to inject arbitrary web script or HTML via (1) parameters associated with saved settings, as demonstrated by the conf_SMTP_MailServer1...

Axis 2100 Network Camera 2.02 Axis 2100 Network Camera Firmware

9.3

CVSSv2

Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and previous versions allow remote malicious users to perform actions as administrators, as demonstrated by (1) an SMTP server change through the conf_SMTP_MailServe...

Axis 2100 Network Camera Firmware Axis 2100 Network Camera 2.02

7.5

CVSSv2

Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remote malicious users to gain access to the camera.

Axis 2100 Network Camera Axis 2110 Network Camera Axis 2120 Network Camera Axis Neteye 200 Axis Neteye 200\\+

9.3

CVSSv2

Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control prior to 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote malicious users to...

Axis 2120 Network Camera Axis 2130 Ptz Network Camera Axis 2100 Network Camera Axis 2110 Network Camera Axis Panorama Ptz Camera Axis 2411 Video Server Axis 2420-ir Network Camera Axis 2420 Network Camera Axis 2400 Video Server Axis 2401 Video Server

1 EDB exploit

10

CVSSv2

The web-based administration capability for various Axis Network Camera products allows remote malicious users to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).

Axis 2110 Network Camera Axis 2120 Network Camera Axis 2100 Network Camera Axis 250s Video Server Axis 2130 Ptz Network Camera Axis 2400 Video Server Axis 2401 Video Server Axis 2420 Network Camera Axis 2460 Network Dvr

1 EDB exploit

7.5

CVSSv2

Axis Network Camera 2.40 and previous versions, and Video Server 3.12 and previous versions, allows remote malicious users to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query string to virtualinput.cgi.

1 EDB exploit

5

CVSSv2

Directory traversal vulnerability in Axis Network Camera 2.40 and previous versions, and Video Server 3.12 and previous versions, allows remote malicious users to bypass authentication via a .. (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to c...

10

CVSSv2

Axis Network Camera 2.40 and previous versions, and Video Server 3.12 and previous versions, allows remote malicious users to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2) admin/systemlog.cgi, (3) admin/serverreport.cgi, and (4) admin/paramlist.c...

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) the PATH_INFO to the default URI associated with a directory, as demonstra...

Axis 2100 Network Camera

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook