CVE-2003-0240

published 2003-06-09

CVE-2003-0240: The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration…

Priority P3 50 critical 10 CVSS 2.0

AV N AC L Au N C C I C A C

EXPLOIT

The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).

Affected

9 ranges

Vendor	Product	Version range	Fixed in
axis	2100_network_camera	<= 2.32	—
axis	2110_network_camera	<= 2.32	—
axis	2120_network_camera	<= 2.32	—
axis	2130_ptz_network_camera	<= 2.32	—
axis	2400_video_server	<= 2.32	—
axis	2401_video_server	<= 2.32	—
axis	2420_network_camera	<= 2.32	—
axis	2460_network_dvr	<= 3.00	—
axis	250s_video_server	<= 3.02	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.