Axis 250s Video Server vulnerabilities

4 CVEs affecting Axis 250s Video Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-2427, published 2004-12-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2003-0240, published 2003-06-09. High severity, CVSS 10.0. EPSS: 29.5% chance of exploitation in the next 30 days. The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the…
CVE-2004-2425, published 2004-12-31. High severity, CVSS 7.5. EPSS: 13.5% chance of exploitation in the next 30 days. Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query…
CVE-2004-2427, published 2004-12-31. High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days. Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2)…
CVE-2004-2426, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 4.2% chance of exploitation in the next 30 days. Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST…