CVE-2007-5214: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATHINFO to the default URI associated with a directory, as demonstrated by (a) the root directory and (b) the view/ directory; (2) parameters associated with saved settings, as demonstrated by (c) the confNetworkHostName parameter on the Network page and (d) the confLayoutOwnTitle parameter to ServerManager.srv; and (3) the query string to ServerManager.srv, which is displayed on the logs page. NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5214?
CVE-2007-5214 is considered a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2007-5214?
To mitigate CVE-2007-5214, it is recommended to upgrade the AXIS 2100 Network Camera firmware to a version later than 2.43.
Who is affected by CVE-2007-5214?
CVE-2007-5214 affects users of the AXIS 2100 Network Camera running firmware version 2.43 and earlier.
What types of attacks are possible with CVE-2007-5214?
CVE-2007-5214 allows remote attackers to inject arbitrary web script or HTML, leading to potential cross-site scripting (XSS) attacks.
Is CVE-2007-5214 easy to exploit?
Yes, CVE-2007-5214 can be easily exploited by attackers familiar with crafting web requests to take advantage of the XSS vulnerabilities.