high8.8Public exploit code
CVE-2015-8255
AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AXIS (Multiple Products) - Cross-Site Request Forgery2017-03-17 · webapps · hardware
Impact
AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Axis | Axis Communications Firmware | All versions |