Total vulnerabilities in the database
The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).
| Software | From | Fixed in |
|---|---|---|
| axis / 2100_network_camera | - | 2.32.x |
| axis / 2420_network_camera | - | 2.32.x |
| axis / 2400_video_server | - | 2.32.x |
| axis / 2460_network_dvr | - | 3.00.x |
| axis / 2120_network_camera | - | 2.32.x |
| axis / 2401_video_server | - | 2.32.x |
| axis / 250s_video_server | - | 3.02.x |
| axis / 2110_network_camera | - | 2.32.x |
| axis / 2130_ptz_network_camera | - | 2.32.x |