Secunia

A vulnerability has been identified in several Axis Network Cameras, which can be exploited by a malicious person to bypass user authentication.

Normally a user is required to input a username and password before access is granted to "http://[victim]/admin/admin.shtml". However, by sending a HTTP request with an extra "/" before the "admin" folder, it is possible to bypass the authentication completely.

Example:
http://[victim]//admin/admin.shtml

This method can also be exploited to gain access to other administrative pages.

The following products have been reported vulnerable:
- AXIS 2100 Network Camera versions 2.32 and previous
- AXIS 2110 Network Camera versions 2.32 and previous
- AXIS 2120 Network Camera versions 2.32 and previous
- AXIS 2130 PTZ Network Camera versions 2.32 and previous
- AXIS 2400 Video Server versions 2.32 and previous
- AXIS 2401 Video Server versions 2.32 and previous
- AXIS 2420 Network Camera versions 2.32 and previous
- AXIS 2460 Network DVR versions 3.00 and previous
- AXIS 250S Video Server versions 3.02 and previous

Solution
Apply updated firmware.
Further details available in Customer Area

Provided and/or discovered by
Juliano Rizzo from Core Security Technologies.

Changelog
Further details available in Customer Area

Original Advisory
http://www.coresecurity.com/common/showdoc.php?idx=329&idxseccion=10

Deep Links
Links available in Customer Area