Lucene search

MitreCVE-2017-15885

HistoryOct 25, 2017 - 6:29 a.m.

CVE-2017-15885

2017-10-2506:29:00

CWE-79

mitre

web.nvd.nist.gov

cve

2017

15885

reflected xss

axis 2100 network camera

security vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.025

Percentile

90.3%

JSON

Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the conf_Layout_OwnTitle parameter to view/view.shtml. NOTE: this might overlap CVE-2007-5214.

Affected configurations

Nvd

Node

axis2100_network_camera_firmwareMatch2.03

AND

axis2100_network_cameraMatch-

VendorProductVersionCPE
axis2100_network_camera_firmware2.03cpe:2.3:o:axis:2100_network_camera_firmware:2.03:*:*:*:*:*:*:*
axis2100_network_camera-cpe:2.3:h:axis:2100_network_camera:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
axis	2100_network_camera_firmware	2.03	cpe:2.3:o:axis:2100_network_camera_firmware:2.03:::::::*
axis	2100_network_camera	-	cpe:2.3:h:axis:2100_network_camera:-:::::::*

References

distributedcompute.com/2017/10/24/axis-2100-network-camera-2-03-xss-vulnerability/

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.025

Percentile

90.3%

JSON

Related for CVE-2017-15885