CVE-2004-2426
axis: no CVSS score yet. EPSS 4.2% chance of exploitation in the next 30 days.
Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using editcgi.cgi.
- EPSS
- 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- axis:2100_network_camera
- axis:2110_network_camera
- axis:2120_network_camera
- axis:2130_ptz_network_camera
- axis:230_mpeg2_video_server
- axis:2400_video_server
- axis:2401_video_server
- axis:2411_video_server
- axis:2420_network_camera
- axis:2420_video_server
- axis:2460_network_dvr
- axis:2490_serial_server
- axis:250s_video_server
- axis:storpoint_cd