CyberSec.Space Logo
返回 CVE 浏览器

CVE-2003-0240

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0630%
EPSS Percentile32.25th
Published2003年6月9日
Last Modified2026年4月16日

Vulnerability Description

The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).

Affected Platforms (CPE)

🔌
Axis

2100 Network Camera

<= 2.32
🔌
Axis

2110 Network Camera

<= 2.32
🔌
Axis

2120 Network Camera

<= 2.32
🔌
Axis

2130 Ptz Network Camera

<= 2.32
🔌
Axis

2400 Video Server

<= 2.32
🔌
Axis

2401 Video Server

<= 2.32
🔌
Axis

2420 Network Camera

<= 2.32
🔌
Axis

2460 Network Dvr

<= 3.00
🔌
Axis

250s Video Server

<= 3.02

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=105406374731579&w=2
🔗 http://secunia.com/advisories/8876
🔗 http://securitytracker.com/id?1006854
🔗 http://www.coresecurity.com/common/showdoc.php?idx=329&idxseccion=10
🔗 http://www.kb.cert.org/vuls/id/799060
🔗 http://www.osvdb.org/4804
🔗 http://www.securityfocus.com/bid/7652
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/12104

相关漏洞威胁

CVE-2007-52139.3

Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier all...

CVE-2001-15437.5

Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remote attacker...

CVE-2017-158856.1

Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaSc...

CVE-2004-03345.0

InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admindetail.asp, ...