Axis 2411 Video Server vulnerabilities

4 CVEs affecting Axis 2411 Video Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2239, published 2007-05-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-2425, published 2004-12-31. High severity, CVSS 7.5. EPSS: 13.5% chance of exploitation in the next 30 days. Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query…
CVE-2007-2239, published 2007-05-07. High severity, CVSS 9.3. EPSS: 11.8% chance of exploitation in the next 30 days. Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR,…
CVE-2004-2427, published 2004-12-31. High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days. Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2)…
CVE-2004-2426, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 4.2% chance of exploitation in the next 30 days. Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST…