CVE-2007-5213

CWE-352 — Cross-Site Request Forgery (CSRF)3 documents3 sources
Severity
9.3CRITICAL
EPSS
0.8%
top 26.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Axis 2100 Network Camera FirmwareAxis 2100 Network Camera
Timeline
PublishedOct 4
Latest updateMay 1

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by (1) an SMTP server change through the conf_SMTP_MailServer1 parameter to ServerManager.srv and (2) a hostname change through the conf_Network_HostName parameter on the Network page.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-63fv-84qx-hhxv: Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2↗2022-05-01
▶
CVEList
CVE-2007-5213: Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2↗2007-10-04
▶
CVE-2007-5213 (CRITICAL CVSS 9.3) | Multiple cross-site request forgery | cvebase.io