1765 matches found
CVE-2004-2427
Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to 1 admin/getparam.cgi, 2 admin/systemlog.cgi, 3 admin/serverreport.cgi, and 4 admin/paramlist.cgi, modify system information via 5 setparam.cgi an...
CVE-2004-0789
Multiple implementations of the DNS protocol, including 1 Poslib 1.0.2-1 and earlier as used by Posadis, 2 Axis Network products before firmware 3.13, and 3 Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service CPU and network bandwidth...
Multiple Axis products unauthorized access
It's possible to obtain or change administrative account anonymously...
Axis Network Camera and Video Server Security Advisory
Topic Security issues have been identified that allows an attacker to compromise Axis Network Cameras, Video Servers, Serial Servers and Network Digital Video Recorders. 2. Description The first issue allows arbitrary shell command execution via HTTP requests due to erroneous shell command and...
[PoC] Nasty bug(s) found in Axis Network Camera/Video Servers
/ Public disclosure due lack of responce from Axis Communications / I have found a couple of bugs in Axis Network Camera/Video Servers. I have all Axis stuff in one e-mail, instead of multiple, lazy me.. ; Vulnerable: Axis 2100/2110/2120/2420/2130 Network Camera, 2400/2401 Video Server. There may...
axisFlaws.txt
/ Public disclosure due lack of responce from Axis Communications / I have found a couple of bugs in Axis Network Camera/Video Servers. I have all Axis stuff in one e-mail, instead of multiple, lazy me.. ; Vulnerable: Axis 2100/2110/2120/2420/2130 Network Camera, 2400/2401 Video Server. There may...
Axis Network Camera 2.x And Video Server 1-3 - virtualinput.cgi Arbitrary Command Execution
Axis Network Camera 2.x And Video Server 1-3 - virtualinput.cgi Arbitrary Command Execution source: https://www.securityfocus.com/bid/11011/info 1. A shell metacharacter command-execution vulnerability allows an anonymous user to download the contents of the '/etc/passwd' file on the device. Othe...
Axis Network Camera 2.x And Video Server 1-3 - HTTP Authentication Bypass
Axis Network Camera 2.x And Video Server 1-3 - HTTP Authentication Bypass source: https://www.securityfocus.com/bid/11011/info A hardcoded backdoor administrative-user issue allows remote attackers to administer affected devices. This likely cannot be disabled. This issue is reported to affect: -...
Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal
Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal source: https://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authenticatio...
Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal
source: https://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authentication checks and gives anonymous users remote adminitration of the...
Axis Network Camera 2.x And Video Server 1-3 - 'virtualinput.cgi' Arbitrary Command Execution
source: https://www.securityfocus.com/bid/11011/info 1. A shell metacharacter command-execution vulnerability allows an anonymous user to download the contents of the '/etc/passwd' file on the device. Other commands are also likely to work, facilitating other attacks. This issue is reported to...
Generic Shell Detection (AXIS Telnet)
Binary data 1937.prm...
CVE-2003-1386
AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which displays the server's /var/log/messages file...
Axis Print Server 6.156.20 - Web Interface Denial of Service
Axis Print Server 6.156.20 - Web Interface Denial of Service source: https://www.securityfocus.com/bid/8096/info Axis Print Server web interface could expose the device to a denial of service vulnerability. It has been reported that an attacker may make a malicious HTTP request that will trigger ...
Axis Print Server 6.15/6.20 - Web Interface Denial of Service
source: https://www.securityfocus.com/bid/8096/info Axis Print Server web interface could expose the device to a denial of service vulnerability. It has been reported that an attacker may make a malicious HTTP request that will trigger an exception in the affected server, effectively denying...
CVE-2003-0240
The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // double slash...
Various Axis products allow unauthorized remote privileged access
Overview A vulnerability in various Axis Communications products may allow unauthorized remote privileged access. Description Axis Communications Inc. produces network-enabled cameras and video servers. The company describes itself as "an innovative market leader in network video and print server...
CVE-2003-0240
The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // double slash...
CVE-2003-0240
CVE-2003-0240 describes an Axis Network Camera vulnerability where authentication to the admin interface can be bypassed by requesting http://camera-ip//admin/admin.shtml (double slash). This allows remote attackers to bypass restrictions and modify configuration, potentially enabling root access...