Axis 2120 Network Camera vulnerabilities

7 CVEs affecting Axis 2120 Network Camera, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2239, published 2007-05-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2003-0240, published 2003-06-09. High severity, CVSS 10.0. EPSS: 29.5% chance of exploitation in the next 30 days. The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the…
CVE-2004-2425, published 2004-12-31. High severity, CVSS 7.5. EPSS: 13.5% chance of exploitation in the next 30 days. Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query…
CVE-2007-2239, published 2007-05-07. High severity, CVSS 9.3. EPSS: 11.8% chance of exploitation in the next 30 days. Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR,…
CVE-2004-2427, published 2004-12-31. High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days. Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2)…
CVE-2004-2426, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 4.2% chance of exploitation in the next 30 days. Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST…
CVE-2004-0789, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days. Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3…
CVE-2001-1543, published 2001-12-31. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remote attackers to gain access to the camera.