CVE-2003-0240

published 2003-06-09

CVE-2003-0240: The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

EXPLOIT

The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).

Affected

9 ranges

Vendor	Product	Version range	Fixed in
axis	2100_network_camera	<= 2.32	—
axis	2110_network_camera	<= 2.32	—
axis	2120_network_camera	<= 2.32	—
axis	2130_ptz_network_camera	<= 2.32	—
axis	2400_video_server	<= 2.32	—
axis	2401_video_server	<= 2.32	—
axis	2420_network_camera	<= 2.32	—
axis	2460_network_dvr	<= 3.00	—
axis	250s_video_server	<= 3.02	—