CVE-2007-5212: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allow remote attackers to inject arbitrary web script or HTML via (1) parameters associated with saved settings, as demonstrated by the confSMTPMailServer1 parameter to ServerManager.srv; or (2) the subpage parameter to wizard/first/wizardmainfirst.shtml. NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5212?
CVE-2007-5212 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2007-5212?
To mitigate CVE-2007-5212, it is recommended to upgrade the AXIS 2100 Network Camera firmware to version 2.43 or later.
What software is affected by CVE-2007-5212?
CVE-2007-5212 affects the AXIS 2100 Network Camera with firmware versions before 2.43 and specifically version 2.02.
Can CVE-2007-5212 be exploited remotely?
Yes, CVE-2007-5212 can be exploited remotely as it allows attackers to inject arbitrary web scripts through certain parameters.
What type of vulnerability is CVE-2007-5212?
CVE-2007-5212 is a cross-site scripting (XSS) vulnerability that allows for the injection of malicious scripts into web pages.