CVE-2015-8255 AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi.
HighCVSS 8.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| axis communications firmware | All versions | No fix listed |
References
- 41626 exploit third-party-advisory vdb-entry