7.5

CVE-2004-2425

Exploit

Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query string to virtualinput.cgi.

Data is provided by the National Vulnerability Database (NVD)
Axis ≫ 2100 Network Camera Version2.12
Axis ≫ 2100 Network Camera Version2.30
Axis ≫ 2100 Network Camera Version2.31
Axis ≫ 2100 Network Camera Version2.32
Axis ≫ 2100 Network Camera Version2.33
Axis ≫ 2100 Network Camera Version2.34
Axis ≫ 2100 Network Camera Version2.40
Axis ≫ 2100 Network Camera Version2.41
Axis ≫ 2110 Network Camera Version2.12
Axis ≫ 2110 Network Camera Version2.30
Axis ≫ 2110 Network Camera Version2.31
Axis ≫ 2110 Network Camera Version2.32
Axis ≫ 2110 Network Camera Version2.34
Axis ≫ 2110 Network Camera Version2.40
Axis ≫ 2110 Network Camera Version2.41
Axis ≫ 2120 Network Camera Version2.12
Axis ≫ 2120 Network Camera Version2.30
Axis ≫ 2120 Network Camera Version2.31
Axis ≫ 2120 Network Camera Version2.32
Axis ≫ 2120 Network Camera Version2.34
Axis ≫ 2120 Network Camera Version2.40
Axis ≫ 2120 Network Camera Version2.41
Axis ≫ 2130 Ptz Network Camera Version2.30
Axis ≫ 2130 Ptz Network Camera Version2.31
Axis ≫ 2130 Ptz Network Camera Version2.32
Axis ≫ 2130 Ptz Network Camera Version2.34
Axis ≫ 2130 Ptz Network Camera Version2.40
Axis ≫ 230 Mpeg2 Video Server Version3.11
Axis ≫ 2400 Video Server Version1.1
Axis ≫ 2400 Video Server Version1.2
Axis ≫ 2400 Video Server Version1.10
Axis ≫ 2400 Video Server Version1.11
Axis ≫ 2400 Video Server Version1.12
Axis ≫ 2400 Video Server Version1.15
Axis ≫ 2400 Video Server Version2.0
Axis ≫ 2400 Video Server Version2.20
Axis ≫ 2400 Video Server Version2.30
Axis ≫ 2400 Video Server Version2.31
Axis ≫ 2400 Video Server Version2.32
Axis ≫ 2400 Video Server Version2.33
Axis ≫ 2400 Video Server Version2.34
Axis ≫ 2400 Video Server Version3.11
Axis ≫ 2400 Video Server Version3.12
Axis ≫ 2401 Video Server Version1.0_1
Axis ≫ 2401 Video Server Version1.15
Axis ≫ 2401 Video Server Version2.20
Axis ≫ 2401 Video Server Version2.30
Axis ≫ 2401 Video Server Version2.31
Axis ≫ 2401 Video Server Version2.32
Axis ≫ 2401 Video Server Version2.33
Axis ≫ 2401 Video Server Version2.34
Axis ≫ 2401 Video Server Version3.12
Axis ≫ 2401 Video Server Version3.13
Axis ≫ 2411 Video Server Version3.12
Axis ≫ 2411 Video Server Version3.13
Axis ≫ 2420 Network Camera Version2.12
Axis ≫ 2420 Network Camera Version2.30
Axis ≫ 2420 Network Camera Version2.31
Axis ≫ 2420 Network Camera Version2.32
Axis ≫ 2420 Network Camera Version2.33
Axis ≫ 2420 Network Camera Version2.34
Axis ≫ 2420 Network Camera Version2.40
Axis ≫ 2420 Network Camera Version2.41
Axis ≫ 2420 Video Server Version2.32
Axis ≫ 2420 Video Server Version2.34
Axis ≫ 2460 Network Dvr Version3.10
Axis ≫ 2460 Network Dvr Version3.11
Axis ≫ 2490 Serial Server Version2.11.3
Axis ≫ 250s Video Server Version3.03
Axis ≫ 250s Video Server Version3.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 22.52% 0.956
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P