Axis 2420 Video Server vulnerabilities

3 CVEs affecting Axis 2420 Video Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-2427, published 2004-12-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-2425, published 2004-12-31. High severity, CVSS 7.5. EPSS: 13.5% chance of exploitation in the next 30 days. Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query…
CVE-2004-2427, published 2004-12-31. High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days. Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2)…
CVE-2004-2426, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 4.2% chance of exploitation in the next 30 days. Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST…