CVE-2017-20049
A vulnerability, was found in legacy Axis devices such as P3225 and M3005. This affects an unknown part of the component CGI Script. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - product-security@axis.com
- Published
- 2022-06-15
- Last modified
- 2024-08-05
- Weaknesses
- CWE-269
Affected products
- M3005 Firmware (Axis)
- M3007 Firmware (Axis)
- M3045 Firmware (Axis)
- P1204 Firmware (Axis)
- P3225 Firmware (Axis)
- P3367 Firmware (Axis)
References
- https://www.axis.com/dam/public/df/f3/dd/cve-2017-20049-en-US-376956.pdf