← Database

CVE-2004-2427

CRITICAL CVSS: 10.0 Published: 2004-12-31 Modified: 2026-06-16

Description

Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2) admin/systemlog.cgi, (3) admin/serverreport.cgi, and (4) admin/paramlist.cgi, modify system information via (5) setparam.cgi and (6) factorydefault.cgi, or (7) cause a denial of service (reboot) via restart.cgi.

Affected Platforms

Axis 2420 Network CameraAxis 250S Video ServerAxis 2411 Video ServerAxis 2100 Network CameraAxis Storpoint CdAxis 2420 Video ServerAxis 2490 Serial ServerAxis 2401 Video ServerAxis 2400 Video ServerAxis 2460 Network Dvr

Weakness Type

NVD-CWE-Other

References