CVE-2007-5212: XSS
First published: Thu Oct 04 2007(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allow remote attackers to inject arbitrary web script or HTML via (1) parameters associated with saved settings, as demonstrated by the conf_SMTP_MailServer1 parameter to ServerManager.srv; or (2) the subpage parameter to wizard/first/wizard_main_first.shtml. NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Axis 2100 Network Camera Firmware | <=2.42 | |
| AXIS 2100 Network Camera | =2.02 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2007-5212?
CVE-2007-5212 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2007-5212?
To mitigate CVE-2007-5212, it is recommended to upgrade the AXIS 2100 Network Camera firmware to version 2.43 or later.
What software is affected by CVE-2007-5212?
CVE-2007-5212 affects the AXIS 2100 Network Camera with firmware versions before 2.43 and specifically version 2.02.
Can CVE-2007-5212 be exploited remotely?
Yes, CVE-2007-5212 can be exploited remotely as it allows attackers to inject arbitrary web scripts through certain parameters.
What type of vulnerability is CVE-2007-5212?
CVE-2007-5212 is a cross-site scripting (XSS) vulnerability that allows for the injection of malicious scripts into web pages.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/axis
- canonical/axis 2100 network camera firmware
- version/axis 2100 network camera firmware/2.42
- canonical/axis 2100 network camera
- version/axis 2100 network camera/2.02