AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving Open Script Editor, aka a "resource injection vulnerability."
References
Link | Resource |
---|---|
https://www.exploit-db.com/exploits/41625/ | Exploit Third Party Advisory VDB Entry |
Configurations
Information
Published : 2017-04-09 20:59
Updated : 2017-04-13 12:57
NVD link : CVE-2015-8258
Mitre link : CVE-2015-8258
JSON object : View
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Products Affected
axis
- axis_communications_firmware