High

DATE	CVE	VULNERABILITY TITLE	RISK
2017-04-10	CVE-2015-8258	Injection vulnerability in Axis Communications Firmware 5.80.3 AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving Open Script Editor, aka a "resource injection vulnerability." network low complexity axis CWE-74	7.5
2017-04-10	CVE-2015-8255	Cross-Site Request Forgery (CSRF) vulnerability in Axis Communications Firmware AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi. network low complexity axis CWE-352	8.8