CVE-2004-2425: High severity Axis 2100 Network Camera vulnerability
Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent () and possibly other shell metacharacters in the query string to virtualinput.cgi.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2425?
CVE-2004-2425 is considered a critical vulnerability that allows remote attackers to execute arbitrary commands on affected Axis Network Cameras and Video Servers.
How do I fix CVE-2004-2425?
To fix CVE-2004-2425, users should upgrade to the latest version of Axis Network Cameras or Video Servers that have patched this vulnerability.
Which Axis products are affected by CVE-2004-2425?
CVE-2004-2425 affects Axis Network Cameras versions 2.40 and earlier, and Video Servers versions 3.12 and earlier.
What type of attack is possible with CVE-2004-2425?
CVE-2004-2425 allows attackers to conduct remote command injection attacks via specially crafted query strings sent to virtualinput.cgi.
Is there a workaround for CVE-2004-2425 if I can't upgrade?
A potential workaround for CVE-2004-2425 is to restrict access to the affected devices through firewalls or network segmentation until an upgrade can be performed.