Axis 207w Network Camera vulnerabilities

4 CVEs affecting Axis 207w Network Camera, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-4930, published 2007-09-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-4930, published 2007-09-18. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 207W camera allow remote attackers to perform certain actions as administrators via (1) axis-cgi/admin/restart.cgi, (2) the user…
CVE-2007-4929, published 2007-09-18. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 207W camera allow remote attackers to inject arbitrary web script or HTML via the camNo parameter to incl/image_incl.shtml, and other…
CVE-2007-4927, published 2007-09-18. Low severity, CVSS 3.5. EPSS: 1.8% chance of exploitation in the next 30 days. axis-cgi/buffer/command.cgi on the AXIS 207W camera allows remote authenticated users to cause a denial of service (reboot) via many requests with unique buffer names in the buffername parameter in a…
CVE-2007-4928, published 2007-09-18. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. The AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might allow local users to obtain sensitive information.