PT-2017-7369 · Axis Communications · Axis Communications

Publicado 2017-04-10 · Atualizado 2017-04-13 · CVE-2015-8258

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions AXIS Communications products versions prior to 5.81

Description The issue allows remote attackers to modify arbitrary files as root via vectors involving Open Script Editor. This is described as a resource injection vulnerability.

Recommendations For versions prior to 5.81, update to version 5.81 or later to resolve the issue. As a temporary workaround, consider restricting access to the Open Script Editor to minimize the risk of exploitation.

Exploit

Correção

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

CVE-2015-8258

Produtos afetados

Axis Communications

Referências · 2

• 🔥 https://exploit-db.com/exploits/41625 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-8258 · Nota de Segurança