CVE-2007-5213 Cross-site request forgery in n/a

Critical 9.3 Published 4 Oct 2007 Updated 7 Aug 2024

Remote attackers can perform administrative actions via CSRF, requiring user interaction to modify camera settings.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2007-5213?

CVE-2007-5213 is a critical vulnerability in n/a, published on 4 Oct 2007. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by (1) an SMTP server change through the conf_SMTP_MailServer1 parameter to ServerManager.srv and (2) a hostname change through the conf_Network_HostName parameter on the Network page.

Weakness: CWE-352

Which versions are affected by CVE-2007-5213?

It affects 2 products.

Products include Axis 2100 Network Camera, Axis 2100 Network Camera Firmware.

How do I fix CVE-2007-5213?

No fix has been published for CVE-2007-5213 yet. Limit exposure of the affected software until one is available.

Is CVE-2007-5213 being exploited?

There is no known exploitation of CVE-2007-5213 in the wild and no public exploit code.

Sources

Also known as GHSA-63fv-84qx-hhxv.