CVE-2007-5213 | BDVDB-2026-26653 Detail

Description#

Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by (1) an SMTP server change through the conf_SMTP_MailServer1 parameter to ServerManager.srv and (2) a hostname change through the conf_Network_HostName parameter on the Network page.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.procheckup.com/Vulnerability_Axis_2100_research.pdf
http://osvdb.org/39490
http://securityreason.com/securityalert/3188
http://www.securityfocus.com/bid/25837
http://osvdb.org/39491
http://www.securityfocus.com/archive/1/480995/100/0/threaded

Exploit#

No public exploit known

History#

Version 12007-10-04Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.