Browse CVEs

HIGH 7.5 CVE-2018-10658 There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from … A1001 Firmware 1.65.0 / 1.65.1+ Fix from $1,9502018-06-26 HIGH 7.5 CVE-2018-10659 There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (cras… A1001 Firmware 1.65.0 / 1.65.1+ Fix from $1,9502018-06-26 HIGH 7.5 CVE-2018-10663 An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation. A1001 Firmware 1.65.0 / 1.65.1+ Fix from $1,9502018-06-26 HIGH 7.5 CVE-2018-10664 An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption. A1001 Firmware 1.65.0 / 1.65.1+ Fix from $1,9502018-06-26 HIGH 7.5 CVE-2018-9156 An issue was discovered on AXIS P1354 (IP camera) Firmware version 5.90.1.1 devices. The upload web page doesn't verify the file type, and an attacke… P1354 Firmware No fix yet Fix from $1,9502018-04-01 HIGH 7.5 CVE-2018-9157 An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. The upload web page doesn't verify the file type, and an attac… M1033 W Firmware Mitigation only Fix from $1,9502018-04-01 HIGH 7.5 CVE-2018-9158 An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack… M1033 W Firmware No fix yet Fix from $1,9502018-04-01 MEDIUM 6.1 CVE-2017-15885 Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the conf_L… 2100 Network Camera Firmware No fix yet Fix from $1,6002017-10-25 MEDIUM 6.1 CVE-2017-12413 AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml. 2100 Network Camera Firmware No fix yet Fix from $1,6002017-08-04 HIGH 8.8 CVE-2015-8257EPSS 18% The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell metacharacters in the app pa… Network Camera Firmware No fix yet Fix from $1,9502017-05-02 MEDIUM 6.1 CVE-2015-8256EPSS 51% Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras. Network Camera Firmware No fix yet Fix from $1,6002017-04-17 HIGH 8.8 CVE-2015-8255 AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi. Axis Communications Firmware No fix yet Fix from $1,9502017-04-10 HIGH 7.5 CVE-2015-8258EPSS 9% AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving Open Script … Axis Communications Firmware after 5.80.3 Fix from $1,9502017-04-10 HIGH 8.8 CVE-2013-3543 The AXIS Media Control (AMC) ActiveX control (AxisMediaControlEmb.dll) 6.2.10.11 for AXIS network cameras allows remote attackers to create or overwr… Media Control Activex Control No fix yet Fix from $1,9502013-10-04 HIGH 9.3 CVE-2008-5260EPSS 6% Heap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in AXIS Camera Control 2.40.0.0 allows remote attackers t… Axis Camera Control Mitigation only Fix from $1,9502009-01-26 HIGH 9.3 CVE-2007-5213 Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers… 2100 Network Camera after 2.42 Fix from $1,9502007-10-04 HIGH 9.3 CVE-2007-4926 The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote attackers to obtain sensitive info… 207w Camera Mitigation only Fix from $1,9502007-09-18 HIGH 9.3 CVE-2007-2239EPSS 12% Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in … 2100 Network Camera after 2.39 Fix from $1,9502007-05-07 HIGH 10.0 CVE-2004-2427EPSS 5% Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests … 2100 Network Camera Patch available Fix from $1,9502004-12-31 HIGH 7.5 CVE-2004-2425EPSS 14% Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and pos… 2100 Network Camera Patch available Fix from $1,9502004-12-31 MEDIUM 5.0 CVE-2004-2426 Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authe… 2100 Network Camera Patch available Fix from $1,6002004-12-31 MEDIUM 6.4 CVE-2003-1386EPSS 8% AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which disp… 2400 Video Server Mitigation only Fix from $1,6002003-12-31 HIGH 10.0 CVE-2003-0240EPSS 30% The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify con… 2100 Network Camera after 3.00 Fix from $1,9502003-06-09 HIGH 7.5 CVE-2001-1543 Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remote attackers to gain access to… 2100 Network Camera Mitigation only Fix from $1,9502001-12-31 HIGH 10.0 CVE-2000-0191EPSS 11% Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack. Storpoint Cd Patch available Fix from $1,9502000-02-29 HIGH 7.5 CVE-2000-0144 Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot … 700 Network Document Server Mitigation only Fix from $1,9502000-02-07