CVE-2007-5213 Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstra...
HighCVSS 9.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by (1) an SMTP server change through the conf_SMTP_MailServer1 parameter to ServerManager.srv and (2) a hostname change through the conf_Network_HostName parameter on the Network page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| axis 2100 network camera | = 2.02 | No fix listed |
| axis 2100 network camera firmware | <= 2.42 | No fix listed |
References
- 39490 vdb-entry
- 39491 vdb-entry
- 3188 third-party-advisory
- www.procheckup.com exploit
- 20070928 Owning Big Brother: How to Crack into Axis IP cameras mailing-list
- 25837 vdb-entry