|
 |
|
AXIS 207W Network Camera Multiple Vulnerabilities
|
|
|
|
|
Secunia Advisory:
|
SA26831
|
|
|
Release Date:
|
2007-09-17
|
|
Last Update:
|
2007-09-20
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Cross Site Scripting
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Unpatched
|
|
| OS: | Axis Network Camera
|
|
| | CVE reference: | CVE-2007-4927 (Secunia mirror)
CVE-2007-4926 (Secunia mirror)
CVE-2007-4928 (Secunia mirror)
CVE-2007-4929 (Secunia mirror)
CVE-2007-4930 (Secunia mirror)
|
|
|
This advisory is currently marked as unpatched!
- Companies can be alerted when a patch is released! |
|
|
Description:
Seth Fogie has reported some vulnerabilities in the AXIS 207W Network Camera, which can be exploited by malicious people to conduct cross-site scripting and cross-site request forgery attacks, or by malicious users to cause a DoS (Denial of Service).
1) Input passed to the "camNo" parameter in incl/image_incl.shtml is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
2) The web interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the request. This can be exploited to e.g. reboot the camera, add a new administrator, or to install a backdoor by enticing a logged-in administrator to visit a malicious site.
3) An unspecified vulnerability exists within the axis-cgi/buffer/command.cgi script. This can be exploited to reboot the vulnerable system by issuing multiple HTTP requests (more than 129) for the affected script with the "do" parameter set to "start" and with an arbitrary value for the "buffername" parameter.
Successful exploitation of this vulnerability requires valid user credentials.
Solution:
Filter traffic to affected devices and do not visit untrusted web sites while being logged in to the device.
Provided and/or discovered by:
Seth Fogie, Airscanner Mobile Security
Changelog:
2007-09-20: Added CVE reference.
Original Advisory:
http://airscanner.com/security/07080701_axis.htm
Other References:
http://www.informit.com/articles/article.aspx?p=1016102
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
5 Related Secunia Security Advisories
|
|
|
1. Axis Products DNS Implementation Denial of Service Vulnerability
|
|
2. Axis Network Camera / Video Server Command Injection and Directory Traversal
|
|
3. Axis Network Camera HTTP Authentication Bypass Vulnerability
|
|
4. Axis Webcams Three Vulnerabilities
|
|
5. Axis cameras and video servers buffer overflow
|
|
|
Send Feedback to Secunia
|
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
|
|
Secunia PSI
Scan | Patch | Track
Free Download
|
|
|
Secunia Poll
|
|
|
|
|
 |
|
|
Most Popular Advisories
|
|
|
|
|
|
