CVEvulnerability

CVE-2017-20049

9.8 CRITICAL Published 2022-06-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-06-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-269

Description

A vulnerability, was found in legacy Axis devices such as P3225 and M3005. This affects an unknown part of the component CGI Script. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely.

Affected configurations

• axis p1204 firmware (<= 5.50.4) • axis p3225 firmware (<= 6.30.1) • axis p3367 firmware (<= 6.10.1.2) • axis m3045 firmware (<= 6.15.4.1) • axis m3005 firmware (<= 5.50.5.7) • axis m3007 firmware (<= 6.30.1.1)

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References