An authentication downgrade in the server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart camera Axis M1125) to achieve HTTP access to the camera.
CVSS Score
5.9
EPSS Score
0.001
Published
2022-07-21
The server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart camera Axis M1125) to see FTP credentials in a cleartext HTTP traffic. These can be used for FTP access to the server.
CVSS Score
5.9
EPSS Score
0.001
Published
2022-07-21
There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code inside libdbus-send.so shared object or similar.
CVSS Score
7.5
EPSS Score
0.006
Published
2018-06-26
There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction.
CVSS Score
7.5
EPSS Score
0.012
Published
2018-06-26
An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.
CVSS Score
9.8
EPSS Score
0.923
Published
2018-06-26
An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
CVSS Score
9.8
EPSS Score
0.905
Published
2018-06-26
An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.
CVSS Score
9.8
EPSS Score
0.835
Published
2018-06-26
An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation.
CVSS Score
7.5
EPSS Score
0.005
Published
2018-06-26
An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption.
CVSS Score
7.5
EPSS Score
0.006
Published
2018-06-26