Axis vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2017-20049 A vulnerability, was found in legacy Axis devices such as P3225 and M3005.Critical 9.8 · Jun 15, 2022
• CVE-2018-10664 An issue was discovered in the httpd process in multiple models of Axis IP Cameras.High 7.5 · Jun 26, 2018
• CVE-2018-10663 An issue was discovered in multiple models of Axis IP Cameras.High 7.5 · Jun 26, 2018
• CVE-2018-10662 An issue was discovered in multiple models of Axis IP Cameras.Critical 9.8 · Jun 26, 2018
• CVE-2018-10661 An issue was discovered in multiple models of Axis IP Cameras.Critical 9.8 · Jun 26, 2018
• CVE-2018-10660 An issue was discovered in multiple models of Axis IP Cameras.Critical 9.8 · Jun 26, 2018
• CVE-2018-10659 There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sendiHigh 7.5 · Jun 26, 2018
• CVE-2018-10658 There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash).High 7.5 · Jun 26, 2018
• CVE-2018-9158 An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices.High 7.5 · Apr 1, 2018
• CVE-2018-9157 An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices.High 7.5 · Apr 1, 2018
• CVE-2018-9156 An issue was discovered on AXIS P1354 (IP camera) Firmware version 5.90.1.1 devices.High 7.5 · Apr 1, 2018
• CVE-2015-8257 The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell metacharacters in the app parameter to High 8.8 · May 2, 2017
• CVE-2015-8258 AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving Open Script Editor, akaHigh 7.5 · Apr 9, 2017
• CVE-2015-8255 AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi.High 8.8 · Apr 9, 2017
• CVE-2013-3543 The AXIS Media Control (AMC) ActiveX control (AxisMediaControlEmb.dll) 6.2.10.11 for AXIS network cameras allows remote attackers to create or overwrite arbitraHigh 8.8 · Oct 4, 2013
• CVE-2008-5260 Heap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in AXIS Camera Control 2.40.0.0 allows remote attackers to execute aHigh 9.3 · Jan 26, 2009
• CVE-2007-5213 Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to performHigh 9.3 · Oct 4, 2007
• CVE-2007-4926 The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote attackers to obtain sensitive information by High 9.3 · Sep 18, 2007
• CVE-2007-2239 Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, High 9.3 · May 7, 2007
• CVE-2004-2425 Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly otherHigh 7.5 · Dec 31, 2004
• CVE-2004-2427 Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1) admiHigh 10 · Dec 31, 2004
• CVE-2003-0240 The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration High 10 · Jun 9, 2003
• CVE-2001-1543 Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remote attackers to gain access to the cameraHigh 7.5 · Dec 31, 2001
• CVE-2000-0191 Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a ..High 10 · Feb 29, 2000
• CVE-2000-0144 Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a ..High 7.5 · Feb 7, 2000