GCVE - cpe:2.3:h:axis:207w_network_camera:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:axis:207w_network_camera:*:*:*:*:*:*:*:*

part: h version: * update: *

Vendor	Axis (`70b79958-9d75-5ad6-90bd-d85cad17d4e7`)
Product	207W Network Camera (`632e9b72-4880-58a7-b0f2-baeb42c2bb06`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-4930`	vulnerable	2026-06-08 04:49:57.482604	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 207W camera allow remote attackers to perform certain actions as administrators via (1) axis-cgi/admin/restart.cgi, (2) the user and sgrp parameters to axis-cgi/admin/pwdgrp.cgi in an add action, or (3) the server parameter to admin/restartMessage.shtml. Published: 2007-09-18T18:00:00.000Z Updated: 2024-08-07T15:17:27.066Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/479600/100/0/threaded http://securityreason.com/securityalert/3145 http://www.securityfocus.com/bid/25678 http://airscanner.com/security/07080701_axis.htm http://www.securitytracker.com/id?1018699	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4929`	vulnerable	2026-06-08 04:49:57.482272	Details available Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 207W camera allow remote attackers to inject arbitrary web script or HTML via the camNo parameter to incl/image_incl.shtml, and other unspecified vectors. Published: 2007-09-18T18:00:00.000Z Updated: 2024-08-07T15:17:27.179Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/479600/100/0/threaded http://securityreason.com/securityalert/3145 http://www.securityfocus.com/bid/25678 http://airscanner.com/security/07080701_axis.htm http://www.securitytracker.com/id?1018699	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4928`	vulnerable	2026-06-08 04:49:57.481920	Details available The AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might allow local users to obtain sensitive information. Published: 2007-09-18T18:00:00.000Z Updated: 2024-08-07T15:17:26.859Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/479600/100/0/threaded http://securityreason.com/securityalert/3145 http://airscanner.com/security/07080701_axis.htm http://www.informit.com/articles/article.aspx?p=1016102	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4927`	vulnerable	2026-06-08 04:49:57.481545	Details available axis-cgi/buffer/command.cgi on the AXIS 207W camera allows remote authenticated users to cause a denial of service (reboot) via many requests with unique buffer names in the buffername parameter in a start action. Published: 2007-09-18T18:00:00.000Z Updated: 2024-08-07T15:17:26.848Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/479600/100/0/threaded http://securityreason.com/securityalert/3145 http://www.securityfocus.com/bid/25678 http://airscanner.com/security/07080701_axis.htm http://www.securitytracker.com/id?1018699	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.