10

CVE-2003-0240

The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Axis ≫ 2100 Network Camera Version <= 2.32
Axis ≫ 2110 Network Camera Version <= 2.32
Axis ≫ 2120 Network Camera Version <= 2.32
Axis ≫ 2130 Ptz Network Camera Version <= 2.32
Axis ≫ 2400 Video Server Version <= 2.32
Axis ≫ 2401 Video Server Version <= 2.32
Axis ≫ 2420 Network Camera Version <= 2.32
Axis ≫ 2460 Network Dvr Version <= 3.00
Axis ≫ 250s Video Server Version <= 3.02
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 29.52% 0.979
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=105406374731579&w=2
http://secunia.com/advisories/8876
http://securitytracker.com/id?1006854
http://www.coresecurity.com/common/showdoc.php?idx=329&idxseccion=10
http://www.kb.cert.org/vuls/id/799060
US Government Resource
http://www.osvdb.org/4804
http://www.securityfocus.com/bid/7652
https://exchange.xforce.ibmcloud.com/vulnerabilities/12104