CVE-2007-5213: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by (1) an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and (2) a hostname change through the confNetworkHostName parameter on the Network page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5213?
CVE-2007-5213 is classified as a medium severity vulnerability due to its potential for unauthorized administrative actions.
How do I fix CVE-2007-5213?
To mitigate CVE-2007-5213, upgrade the AXIS 2100 Network Camera to the latest firmware version beyond 2.43.
What types of attacks are possible due to CVE-2007-5213?
CVE-2007-5213 allows remote attackers to perform actions such as changing settings as an administrator through CSRF exploits.
Which devices are affected by CVE-2007-5213?
CVE-2007-5213 affects AXIS 2100 Network Camera firmware versions 2.43 and earlier, as well as version 2.02.
Is user interaction required to exploit CVE-2007-5213?
CVE-2007-5213 can be exploited without user interaction, making it particularly dangerous for users of the affected devices.