PT-2007-3997 · Canon · Canon Network Camera Server Vb100+2

Publicado 2007-05-15 · Atualizado 2011-03-08 · CVE-2007-2680

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Canon Network Camera Server VB100 versions 3.0 R69 and earlier Canon Network Camera Server VB101 versions 3.0 R69 and earlier Canon Network Camera Server VB150 versions 1.1 R39 and earlier

Description A cross-site scripting (XSS) issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized access or control of the camera server.

Recommendations For Canon Network Camera Server VB100 versions 3.0 R69 and earlier, update to a version later than 3.0 R69. For Canon Network Camera Server VB101 versions 3.0 R69 and earlier, update to a version later than 3.0 R69. For Canon Network Camera Server VB150 versions 1.1 R39 and earlier, update to a version later than 1.1 R39.

Correção

Identificadores relacionados

CVE-2007-2680

Produtos afetados

Canon Network Camera Server Vb100

Canon Network Camera Server Vb101

Canon Network Camera Server Vb150

Referências · 7

• http://secunia.com/advisories/24940 · Aviso do Fabricante
• http://jvn.jp/jp/JVN%2306735665 · Nota
• http://securityfocus.com/bid/23560 · Nota
• http://vupen.com/english/advisories/2007/1461 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2680 · Nota de Segurança
• http://cweb.canon.jp/drv-upd/webview/notification.html · Nota
• http://osvdb.org/35019 · Nota