2100 Network Camera

Vendor:

First CVE: Dec 31, 2001 · Active for 24 years

12

Total CVEs

More Total CVEs than 90% of tracked products

2.4

Avg CVEs / Year

Higher CVE frequency than 74% of tracked products

7.0

Avg CVSS

Higher Avg CVSS than 42% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact 2100 Network Camera over time

Volume of CVEsAvg CVSS Base Score

First CVE

Dec 31, 2001

24 years ago

Most Recent CVE

Oct 25, 2017

3,196 days ago

CVE Severity & Scoring

2100 Network Camera12 CVEs

50%

All CVEs352,719 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network2 (16.7%)

Unknown10 (83.3%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low2 (16.7%)

High0 (0.0%)

Unknown10 (83.3%)

User Interaction

None0 (0.0%)

Unknown10 (83.3%)

Required2 (16.7%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None2 (16.7%)

Unknown10 (83.3%)

Top CVEs

Signals from CVEs in this product scope (12 CVEs).

12 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2003-0240HIGH The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request	Jun 9, 2003	10.0	51	NO	YES
CVE-2007-2239HIGH Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ	May 7, 2007	9.3	38	NO	YES
CVE-2004-2425HIGH Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly other shell metacharacter	Dec 31, 2004	7.5	34	NO	YES
CVE-2004-2427HIGH Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2)	Dec 31, 2004	10.0	32	NO	NO
CVE-2007-5213HIGH Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administ	Oct 4, 2007	9.3	23	NO	NO
CVE-2017-15885MEDIUM Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the conf_Layout_OwnTitle parameter to vie	Oct 25, 2017	6.1	20	NO	NO
CVE-2004-0789MEDIUM Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite	Dec 31, 2004	5.0	20	NO	NO
CVE-2001-1543HIGH Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remote attackers to gain access to the camera.	Dec 31, 2001	7.5	20	NO	NO
CVE-2017-12413MEDIUM AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml.	Aug 4, 2017	6.1	17	NO	NO
CVE-2007-5212MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allow remote attackers to inject arbitrary web script or HTML via	Oct 4, 2007	4.3	16	NO	NO

View all 12 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (12 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

3 CVEs

25.0% of CVEs· 90th percentile

Social Chatter

Signals from CVEs in this product scope (12 CVEs).

Media Mentions

Signals from CVEs in this product scope (12 CVEs).

Top CNAs Publishing CVEs For 2100 Network Camera

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
2.41	4	6.9	6.5%	1
2.40	4	6.9	6.5%	1
2.34	4	6.9	6.5%	1
2.33	4	6.9	6.5%	1
2.32	4	6.9	6.5%	1
2.31	4	6.9	6.5%	1
2.30	4	6.9	6.5%	1
2.12	4	6.9	6.5%	1
2.03	1	5.0	2.8%	0
2.02	3	6.2	2.1%	0
2.01	1	5.0	2.8%	0
2.0	1	5.0	2.8%	0