cbcvebase.
CVE-2004-2427
published 2004-12-31

CVE-2004-2427: Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1)…

PriorityP430critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
5.37%
91.8th percentile
Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2) admin/systemlog.cgi, (3) admin/serverreport.cgi, and (4) admin/paramlist.cgi, modify system information via (5) setparam.cgi and (6) factorydefault.cgi, or (7) cause a denial of service (reboot) via restart.cgi.

Affected

70 ranges· showing 25
VendorProductVersion rangeFixed in
axis2100_network_camera——
axis2100_network_camera——
axis2100_network_camera——
axis2100_network_camera——
axis2100_network_camera——
axis2100_network_camera——
axis2100_network_camera——
axis2100_network_camera——
axis2110_network_camera——
axis2110_network_camera——
axis2110_network_camera——
axis2110_network_camera——
axis2110_network_camera——
axis2110_network_camera——
axis2110_network_camera——
axis2120_network_camera——
axis2120_network_camera——
axis2120_network_camera——
axis2120_network_camera——
axis2120_network_camera——
axis2120_network_camera——
axis2120_network_camera——
axis2130_ptz_network_camera——
axis2130_ptz_network_camera——
axis2130_ptz_network_camera——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.