CVEvulnerability

CVE-2003-0240

10.0 HIGH Published 2003-06-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-06-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).

Affected configurations

• axis 2100 network camera (<= 2.32) • axis 2110 network camera (<= 2.32) • axis 2120 network camera (<= 2.32) • axis 2130 ptz network camera (<= 2.32) • axis 2400 video server (<= 2.32) • axis 2401 video server (<= 2.32) • axis 2420 network camera (<= 2.32) • axis 2460 network dvr (<= 3.00) • axis 250s video server (<= 3.02)

References