Vulnerabilities > Axis > Axis Communications Firmware

DATE CVE VULNERABILITY TITLE RISK
2017-04-10 CVE-2015-8258 Injection vulnerability in Axis Communications Firmware 5.80.3
AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving Open Script Editor, aka a "resource injection vulnerability."
network
low complexity
axis CWE-74
7.5
7.5
2017-04-10 CVE-2015-8255 Cross-Site Request Forgery (CSRF) vulnerability in Axis Communications Firmware
AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi.
network
low complexity
axis CWE-352
8.8
8.8