CVE-2003-0240

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 29.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-06-09 · updated 2026-06-16

Description

The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).

Affected products

Axis 2100 Network Camera: through 2.32
Axis 2110 Network Camera: through 2.32
Axis 2120 Network Camera: through 2.32
Axis 2130 Ptz Network Camera: through 2.32
Axis 2400 Video Server: through 2.32
Axis 2401 Video Server: through 2.32
Axis 2420 Network Camera: through 2.32
Axis 2460 Network Dvr: through 3.00
Axis 250S Video Server: through 3.02

References

http://marc.info/?l=bugtraq&m=105406374731579&w=2
http://secunia.com/advisories/8876
http://securitytracker.com/id?1006854
http://www.coresecurity.com/common/showdoc.php?idx=329&idxseccion=10
http://www.kb.cert.org/vuls/id/799060
http://www.osvdb.org/4804
http://www.securityfocus.com/bid/7652
https://exchange.xforce.ibmcloud.com/vulnerabilities/12104
http://marc.info/?l=bugtraq&m=105406374731579&w=2
http://secunia.com/advisories/8876
http://securitytracker.com/id?1006854
http://www.coresecurity.com/common/showdoc.php?idx=329&idxseccion=10

Get alerted when CVE-2003-0240 or the next vulnerability affects your stack