CVEvulnerability
CVE-2007-5213
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-352
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by (1) an SMTP server change through the conf_SMTP_MailServer1 parameter to ServerManager.srv and (2) a hostname change through the conf_Network_HostName parameter on the Network page.
Affected configurations
• axis 2100 network camera 2.02
• axis 2100 network camera firmware (<= 2.42)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://osvdb.org/39490 osvdb.org
- http://osvdb.org/39491 osvdb.org
- http://securityreason.com/securityalert/3188 securityreason.com
- http://www.procheckup.com/Vulnerability_Axis_2100_research.pdf Exploit
- http://www.securityfocus.com/archive/1/480995/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25837 www.securityfocus.com
- http://osvdb.org/39490 osvdb.org
- http://osvdb.org/39491 osvdb.org
- http://securityreason.com/securityalert/3188 securityreason.com
- http://www.procheckup.com/Vulnerability_Axis_2100_research.pdf Exploit
- http://www.securityfocus.com/archive/1/480995/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25837 www.securityfocus.com