First published: Thu Oct 04 2007(Updated: )
Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by (1) an SMTP server change through the conf_SMTP_MailServer1 parameter to ServerManager.srv and (2) a hostname change through the conf_Network_HostName parameter on the Network page.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Axis 2100 Network Camera Firmware | =2.02 | |
Axis 2100 Network Camera Firmware | <=2.42 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-5213 is classified as a medium severity vulnerability due to its potential for unauthorized administrative actions.
To mitigate CVE-2007-5213, upgrade the AXIS 2100 Network Camera to the latest firmware version beyond 2.43.
CVE-2007-5213 allows remote attackers to perform actions such as changing settings as an administrator through CSRF exploits.
CVE-2007-5213 affects AXIS 2100 Network Camera firmware versions 2.43 and earlier, as well as version 2.02.
CVE-2007-5213 can be exploited without user interaction, making it particularly dangerous for users of the affected devices.