Axis Communications Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2017-04-10	CVE-2015-8258	Injection vulnerability in Axis Communications Firmware AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving Open Script Editor, aka a "resource injection vulnerability." network low complexity axis CWE-74	7.8
2017-04-10	CVE-2015-8255	Cross-Site Request Forgery (CSRF) vulnerability in Axis Communications Firmware AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi. network axis CWE-352	6.8