Lucene search

[email protected]CVE-2004-2425

HistoryAug 18, 2005 - 4:00 a.m.

CVE-2004-2425

2005-08-1804:00:00

[email protected]

web.nvd.nist.gov

axis

network camera

video server

remote command execution

cve-2004-2425

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.057 Low

EPSS

Percentile

93.4%

JSON

Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query string to virtualinput.cgi.

Affected configurations

NVD

Node

axis2100_network_cameraMatch2.12

axis2100_network_cameraMatch2.30

axis2100_network_cameraMatch2.31

axis2100_network_cameraMatch2.32

axis2100_network_cameraMatch2.33

axis2100_network_cameraMatch2.34

axis2100_network_cameraMatch2.40

axis2100_network_cameraMatch2.41

axis2110_network_cameraMatch2.12

axis2110_network_cameraMatch2.30

axis2110_network_cameraMatch2.31

axis2110_network_cameraMatch2.32

axis2110_network_cameraMatch2.34

axis2110_network_cameraMatch2.40

axis2110_network_cameraMatch2.41

axis2120_network_cameraMatch2.12

axis2120_network_cameraMatch2.30

axis2120_network_cameraMatch2.31

axis2120_network_cameraMatch2.32

axis2120_network_cameraMatch2.34

axis2120_network_cameraMatch2.40

axis2120_network_cameraMatch2.41

axis2130_ptz_network_cameraMatch2.30

axis2130_ptz_network_cameraMatch2.31

axis2130_ptz_network_cameraMatch2.32

axis2130_ptz_network_cameraMatch2.34

axis2130_ptz_network_cameraMatch2.40

axis230_mpeg2_video_serverMatch3.11

axis2400_video_serverMatch1.1

axis2400_video_serverMatch1.2

axis2400_video_serverMatch1.10

axis2400_video_serverMatch1.11

axis2400_video_serverMatch1.12

axis2400_video_serverMatch1.15

axis2400_video_serverMatch2.0

axis2400_video_serverMatch2.20

axis2400_video_serverMatch2.30

axis2400_video_serverMatch2.31

axis2400_video_serverMatch2.32

axis2400_video_serverMatch2.33

axis2400_video_serverMatch2.34

axis2400_video_serverMatch3.11

axis2400_video_serverMatch3.12

axis2401_video_serverMatch1.0_1

axis2401_video_serverMatch1.15

axis2401_video_serverMatch2.20

axis2401_video_serverMatch2.30

axis2401_video_serverMatch2.31

axis2401_video_serverMatch2.32

axis2401_video_serverMatch2.33

axis2401_video_serverMatch2.34

axis2401_video_serverMatch3.12

axis2401_video_serverMatch3.13

axis2411_video_serverMatch3.12

axis2411_video_serverMatch3.13

axis2420_network_cameraMatch2.12

axis2420_network_cameraMatch2.30

axis2420_network_cameraMatch2.31

axis2420_network_cameraMatch2.32

axis2420_network_cameraMatch2.33

axis2420_network_cameraMatch2.34

axis2420_network_cameraMatch2.40

axis2420_network_cameraMatch2.41

axis2420_video_serverMatch2.32

axis2420_video_serverMatch2.34

axis2460_network_dvr

axis2460_network_dvrMatch3.10

axis2460_network_dvrMatch3.11

axis2490_serial_server

axis2490_serial_serverMatch2.11.3

axis250s_video_server

axis250s_video_serverMatch3.03

axis250s_video_serverMatch3.10

axisstorpoint_cd

CPENameOperatorVersion
axis:2100_network_cameraaxis 2100 network cameraeq2.12
axis:2100_network_cameraaxis 2100 network cameraeq2.30
axis:2100_network_cameraaxis 2100 network cameraeq2.31
axis:2100_network_cameraaxis 2100 network cameraeq2.32
axis:2100_network_cameraaxis 2100 network cameraeq2.33
axis:2100_network_cameraaxis 2100 network cameraeq2.34
axis:2100_network_cameraaxis 2100 network cameraeq2.40
axis:2100_network_cameraaxis 2100 network cameraeq2.41
axis:2110_network_cameraaxis 2110 network cameraeq2.12
axis:2110_network_cameraaxis 2110 network cameraeq2.30

CPE	Name	Operator	Version
axis:2100_network_camera	axis 2100 network camera	eq	2.12
axis:2100_network_camera	axis 2100 network camera	eq	2.30
axis:2100_network_camera	axis 2100 network camera	eq	2.31
axis:2100_network_camera	axis 2100 network camera	eq	2.32
axis:2100_network_camera	axis 2100 network camera	eq	2.33
axis:2100_network_camera	axis 2100 network camera	eq	2.34
axis:2100_network_camera	axis 2100 network camera	eq	2.40
axis:2100_network_camera	axis 2100 network camera	eq	2.41
axis:2110_network_camera	axis 2110 network camera	eq	2.12
axis:2110_network_camera	axis 2110 network camera	eq	2.30

Rows per page:

1-10 of 741

References

archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html

archives.neohapsis.com/archives/fulldisclosure/2004-08/1282.html

secunia.com/advisories/12353

securitytracker.com/id?1011056

www.osvdb.org/9121

www.securityfocus.com/bid/11011

exchange.xforce.ibmcloud.com/vulnerabilities/17076

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.057 Low

EPSS

Percentile

93.4%

JSON

Related for CVE-2004-2425

cvelist1 nvd1