Lucene search

[email protected]CVE-2015-8258

HistoryApr 10, 2017 - 3:59 a.m.

CVE-2015-8258

2017-04-1003:59:00

CWE-74

[email protected]

web.nvd.nist.gov

cve-2015-8258

axis communications

firmware

remote attackers

root access

resource injection vulnerability

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:C/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.5 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.7%

JSON

AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving Open Script Editor, aka a “resource injection vulnerability.”

Affected configurations

NVD

Node

axisaxis_communications_firmwareRange≤5.80.3

CPENameOperatorVersion
axis:axis_communications_firmwareaxis axis communications firmwarele5.80.3

CPE	Name	Operator	Version
axis:axis_communications_firmware	axis axis communications firmware	le	5.80.3

CNA Affected

[
  {
    "product": "AXIS Communications products with firmware through 5.80.x",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "AXIS Communications products with firmware through 5.80.x"
      }
    ]
  }
]