What’s Vulnerable › Vulnerabilities

CVE-2004-2427

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-12-31 · updated 2026-06-16

Description

Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2) admin/systemlog.cgi, (3) admin/serverreport.cgi, and (4) admin/paramlist.cgi, modify system information via (5) setparam.cgi and (6) factorydefault.cgi, or (7) cause a denial of service (reboot) via restart.cgi.

Affected products

• Axis 2100 Network Camera: 2.12, 2.30, 2.31, 2.32, 2.33, 2.34 (+2)
• Axis 2110 Network Camera: 2.12, 2.30, 2.31, 2.32, 2.34, 2.40 (+1)
• Axis 2120 Network Camera: 2.12, 2.30, 2.31, 2.32, 2.34, 2.40 (+1)
• Axis 2130 Ptz Network Camera: 2.30, 2.31, 2.32, 2.34, 2.40
• Axis 230 Mpeg2 Video Server: 3.11
• Axis 2400 Video Server: 1.1, 1.2, 1.10, 1.11, 1.12, 1.15 (+9)
• Axis 2401 Video Server: 1.0_1, 1.15, 2.20, 2.30, 2.31, 2.32 (+4)
• Axis 2411 Video Server: 3.12, 3.13
• Axis 2420 Network Camera: 2.12, 2.30, 2.31, 2.32, 2.33, 2.34 (+2)
• Axis 2420 Video Server: 2.32, 2.34
• Axis 2460 Network Dvr: 3.10, 3.11
• Axis 2490 Serial Server: 2.11.3
• Axis 250S Video Server: 3.03, 3.10
• Axis Storpoint Cd: all versions

References

• http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html
• http://securitytracker.com/id?1011056
• http://www.osvdb.org/9123
• http://www.osvdb.org/9125
• http://www.osvdb.org/9126
• http://www.osvdb.org/9127
• http://www.osvdb.org/9128
• http://www.osvdb.org/9129
• http://www.osvdb.org/9130
• http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html
• http://securitytracker.com/id?1011056
• http://www.osvdb.org/9123

Get alerted when CVE-2004-2427 or the next vulnerability affects your stack