Axis Network Camera unauthorized access

2003-05-2800:00:00

BUGTRAQ

vulners.com

By adding additional / after hostname in Web access URL it's possible to bypass authentication.

CPENameOperatorVersion
axiseq2400
axiseq2130
axiseq2420
axiseq2460
axiseq2401
axiseq2140
axiseq2110
axiseq2120
axiseq2100

Name	Operator	Version
axis	eq	2400
axis	eq	2130
axis	eq	2420
axis	eq	2460
axis	eq	2401
axis	eq	2140
axis	eq	2110
axis	eq	2120
axis	eq	2100

References

vulners.com/securityvulns/securityvulns:doc:4597