CVE-2015-8257: Command Injection
The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell metacharacters in the app parameter to (1) applicense.shtml, (2) applicensecustom.shtml, (3) appindex.shtml, or (4) appparams.shtml.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8257?
CVE-2015-8257 is classified as a critical vulnerability due to the potential for remote authenticated users to execute arbitrary commands.
How do I fix CVE-2015-8257?
Fixing CVE-2015-8257 involves updating the AXIS network camera firmware to the latest version that addresses this vulnerability.
Who is affected by CVE-2015-8257?
CVE-2015-8257 affects specific AXIS network camera firmware versions that allow command execution via the devtools.sh script.
What type of vulnerability is CVE-2015-8257?
CVE-2015-8257 is an authenticated remote command execution vulnerability.
What are the potential consequences of CVE-2015-8257?
The potential consequences of CVE-2015-8257 include unauthorized access and control over affected AXIS network cameras.