Lucene search

K
cve[email protected]CVE-2007-4926
HistorySep 18, 2007 - 6:17 p.m.

CVE-2007-4926

2007-09-1818:17:00
CWE-310
web.nvd.nist.gov
23
axis 207w
camera
base64
cleartext
vulnerability
authentication
remote attackers
sensitive information
wireless network
nvd
cve-2007-4926

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.4%

The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote attackers to obtain sensitive information by sniffing the wireless network or by leveraging unspecified other vectors.

Affected configurations

NVD
Node
axis207w_camera
CPENameOperatorVersion
axis:207w_cameraaxis 207w cameraeq*

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.4%

Related for CVE-2007-4926