Advisories · Technology
Axis Communications AB AXIS Camera Station Pro.
Every CVE that names Axis Communications AB AXIS Camera Station Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Weak encryption in Axis Communications AB AXIS Camera Station Pro and others
- Axis Communications AB AXIS Camera Station Pro
- Axis Communications AB AXIS Camera Station 5
- Weak cryptography or TLS
- CVSS 5.7 Medium
Insecure direct object reference in Axis Communications AB AXIS Camera Station Pro
- Axis Communications AB AXIS Camera Station Pro
- Broken access control
- CVSS 4.6 Medium
Path traversal in Axis Communications AB AXIS Camera Station Pro
- Axis Communications AB AXIS Camera Station Pro
- Path traversal
- CVSS 4.5 Medium
A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server.
- Axis Communications AB AXIS Camera Station Pro
- CWE-248
- CVSS 7.8 High
Sensitive information in log files in Axis Communications AB AXIS Camera Station Pro
- Axis Communications AB AXIS Camera Station Pro
- Information disclosure
- CVSS 5.1 Medium
Server-side request forgery in Axis Communications AB AXIS Camera Station Pro and others
- Axis Communications AB AXIS Camera Station Pro
- Axis Communications AB AXIS Camera Station
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Authentication bypass in Axis Communications AB AXIS Camera Station Pro and others
- Axis Communications AB AXIS Camera Station Pro
- Axis Communications AB AXIS Camera Station
- Authentication bypass
- CVSS 4.8 Medium
Deserialization of untrusted data in Axis Communications AB AXIS Device Manager and others
- Axis Communications AB AXIS Device Manager
- Axis Communications AB AXIS Camera Station Pro
- Insecure deserialization
- CVSS 9.0 CriticalCritical · CVSS 9+
Deserialization of untrusted data in Axis Communications AB AXIS Camera Station Pro and others
- Axis Communications AB AXIS Camera Station Pro
- Axis Communications AB AXIS Camera Station
- Insecure deserialization
- CVSS 5.9 Medium
Incorrect permission assignment in Axis Communications AB AXIS Camera Station Pro
- Axis Communications AB AXIS Camera Station Pro
- Broken access control
- CVSS 6.1 Medium
External control of a file path in Axis Communications AB AXIS Camera Station Pro
- Axis Communications AB AXIS Camera Station Pro
- Path traversal
- CVSS 6.3 Medium
Log injection in Axis Communications AB AXIS Camera Station Pro
- Axis Communications AB AXIS Camera Station Pro
- Other injection
- CVSS 4.4 Medium
Axis Communications AB AXIS Camera Station Pro: Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program has found that it is…
- Axis Communications AB AXIS Camera Station Pro
- Axis Communications AB AXIS Camera Station
- CWE-602
- CVSS 6.3 Medium
Insufficiently protected credentials in Axis Communications AB AXIS Camera Station Pro and others
- Axis Communications AB AXIS Camera Station Pro
- Axis Communications AB AXIS Camera Station
- Hard-coded credentials
- CVSS 4.2 Medium
Incorrect default permissions in Axis Communications AB AXIS Camera Station Pro and others
- Axis Communications AB AXIS Camera Station Pro
- Axis Communications AB AXIS Camera Station
- Broken access control