CVE-2007-4926

The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote attackers to obtain sensitive information by sniffing the wireless network or by leveraging unspecified other vectors.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2007-09-18

Last modified

2024-08-07

Weaknesses

CWE-310

Affected products

• 207w Camera (Axis)

References

• http://airscanner.com/security/07080701_axis.htm
• http://securityreason.com/securityalert/3145
• http://www.informit.com/articles/article.aspx?p=1016102
• http://www.securityfocus.com/archive/1/479600/100/0/threaded
• http://www.securitytracker.com/id?1018699