Directory traversal vulnerability in Axis Network Camera 2.40 and previous versions, and Video Server 3.12 and previous versions, allows remote malicious users to bypass authentication via a .. (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using editcgi.cgi.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
axis 2100 network camera 2.12 |
||
axis 2110 network camera 2.12 |
||
axis 2110 network camera 2.30 |
||
axis 2120 network camera 2.30 |
||
axis 2120 network camera 2.31 |
||
axis 2130 ptz network camera 2.32 |
||
axis 2130 ptz network camera 2.34 |
||
axis 2400 video server 1.2 |
||
axis 2400 video server 2.0 |
||
axis 2400 video server 3.11 |
||
axis 2400 video server 3.12 |
||
axis 2401 video server 2.33 |
||
axis 2401 video server 2.34 |
||
axis 2420 network camera 2.32 |
||
axis 2420 network camera 2.33 |
||
axis 2460 network dvr 3.10 |
||
axis 2460 network dvr 3.11 |
||
axis 2100 network camera 2.32 |
||
axis 2100 network camera 2.33 |
||
axis 2110 network camera 2.34 |
||
axis 2110 network camera 2.40 |
||
axis 2120 network camera 2.40 |
||
axis 2120 network camera 2.41 |
||
axis 2400 video server 1.1 |
||
axis 2400 video server 1.10 |
||
axis 2400 video server 1.11 |
||
axis 2400 video server 2.31 |
||
axis 2400 video server 2.32 |
||
axis 2401 video server 2.20 |
||
axis 2401 video server 2.30 |
||
axis 2411 video server 3.13 |
||
axis 2420 network camera 2.12 |
||
axis 2420 network camera 2.41 |
||
axis 2420 video server 2.32 |
||
axis 250s video server |
||
axis 250s video server 3.03 |
||
axis 2100 network camera 2.30 |
||
axis 2100 network camera 2.31 |
||
axis 2110 network camera 2.31 |
||
axis 2110 network camera 2.32 |
||
axis 2120 network camera 2.32 |
||
axis 2120 network camera 2.34 |
||
axis 2130 ptz network camera 2.40 |
||
axis 230 mpeg2 video server 3.11 |
||
axis 2400 video server 2.20 |
||
axis 2400 video server 2.30 |
||
axis 2401 video server 1.0_1 |
||
axis 2401 video server 1.15 |
||
axis 2401 video server 3.12 |
||
axis 2401 video server 3.13 |
||
axis 2411 video server 3.12 |
||
axis 2420 network camera 2.34 |
||
axis 2420 network camera 2.40 |
||
axis 2490 serial server |
||
axis 2490 serial server 2.11.3 |
||
axis 2100 network camera 2.34 |
||
axis 2100 network camera 2.40 |
||
axis 2100 network camera 2.41 |
||
axis 2110 network camera 2.41 |
||
axis 2120 network camera 2.12 |
||
axis 2130 ptz network camera 2.30 |
||
axis 2130 ptz network camera 2.31 |
||
axis 2400 video server 1.12 |
||
axis 2400 video server 1.15 |
||
axis 2400 video server 2.33 |
||
axis 2400 video server 2.34 |
||
axis 2401 video server 2.31 |
||
axis 2401 video server 2.32 |
||
axis 2420 network camera 2.30 |
||
axis 2420 network camera 2.31 |
||
axis 2420 video server 2.34 |
||
axis 2460 network dvr |
||
axis 250s video server 3.10 |
||
axis storpoint cd |
Vulmon