Axis Storpoint Cd vulnerabilities

4 CVEs affecting Axis Storpoint Cd, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-2427, published 2004-12-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-2425, published 2004-12-31. High severity, CVSS 7.5. EPSS: 13.5% chance of exploitation in the next 30 days. Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query…
CVE-2000-0191, published 2000-02-29. High severity, CVSS 10.0. EPSS: 10.9% chance of exploitation in the next 30 days. Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.
CVE-2004-2427, published 2004-12-31. High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days. Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2)…
CVE-2004-2426, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 4.2% chance of exploitation in the next 30 days. Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST…