CVE-2017-15885

Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the conf_Layout_OwnTitle parameter to view/view.shtml. NOTE: this might overlap CVE-2007-5214.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-10-25

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• 2100 Network Camera Firmware (Axis)

References

• https://distributedcompute.com/2017/10/24/axis-2100-network-camera-2-03-xss-vulnerability/