Approved changes feed: RSS · Atom

cpe:2.3:h:axis:2100_network_camera_firmware:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorAxis (70b79958-9d75-5ad6-90bd-d85cad17d4e7)
Product2100 Network Camera Firmware (cd43de3e-3a18-5d7d-9a5a-8971956d8bee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5213 vulnerable 2026-06-08 04:50:04.592113 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by (1) an SMTP server change through the conf_SMTP_MailServer1 parameter to ServerManager.srv and (2) a hostname change through the conf_Network_HostName parameter on the Network page.
Published: 2007-10-04T23:00:00.000Z
Updated: 2024-08-07T15:24:42.093Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5212 vulnerable 2026-06-08 04:50:04.591649 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allow remote attackers to inject arbitrary web script or HTML via (1) parameters associated with saved settings, as demonstrated by the conf_SMTP_MailServer1 parameter to ServerManager.srv; or (2) the subpage parameter to wizard/first/wizard_main_first.shtml. NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings.
Published: 2007-10-04T23:00:00.000Z
Updated: 2024-08-07T15:24:42.094Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.