Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
| Software | From | Fixed in |
|---|---|---|
| axis / 700_network_document_server | 1.0 | 1.0.x |
| axis / 700_network_document_server | 1.13 | 1.13.x |
| axis / 700_network_document_server | 1.12 | 1.12.x |
| axis / 700_network_document_server | 1.10 | 1.10.x |
| axis / 700_network_document_server | 1.11 | 1.11.x |
| axis / 700_network_document_server | 1.14 | 1.14.x |