Axis 2400 Video Server — known CVE vulnerabilities

Every CVE whose affected-product data names Axis 2400 Video Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2003-0240 — CVSS 10.0 (critical): The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and…
• CVE-2004-2427 — CVSS 10.0 (critical): Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct…
• CVE-2007-2239 — CVSS 9.3 (critical): Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in…
• CVE-2004-2425 — CVSS 7.5 (high): Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent…
• CVE-2003-1386 — CVSS 6.4 (medium): AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages…
• CVE-2004-2426 — CVSS 5.0 (medium): Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to…
• CVE-2004-0789 — CVSS 5.0 (medium): Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before…