critical9.3
CVE-2007-5213
Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perfor…
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by (1) an SMTP server change through the conf_SMTP_MailServer1 parameter to ServerManager.srv and (2) a hostname change through the conf_Network_HostName parameter on the Network page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Axis | 2100 Network Camera | Version 2.02 |
| Axis | 2100 Network Camera Firmware | through 2.42 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/39490
- http://osvdb.org/39491
- http://securityreason.com/securityalert/3188
- http://www.procheckup.com/Vulnerability_Axis_2100_research.pdf
- http://www.securityfocus.com/archive/1/480995/100/0/threaded
- http://www.securityfocus.com/bid/25837
- http://osvdb.org/39490
- http://osvdb.org/39491
- http://securityreason.com/securityalert/3188
- http://www.procheckup.com/Vulnerability_Axis_2100_research.pdf
- http://www.securityfocus.com/archive/1/480995/100/0/threaded
- http://www.securityfocus.com/bid/25837