CVE-2004-2425

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query string to virtualinput.cgi.

Affected (74)

Products: Axis: 2100 Network Camera, 2110 Network Camera, 2120 Network Camera, 2130 Ptz Network Camera, 230 Mpeg2 Video Server, 2400 Video Server, 2401 Video Server, 2411 Video Server, 2420 Network Camera, 2420 Video Server, 2460 Network Dvr, 2490 Serial Server, 250s Video Server, Storpoint Cd

14 products

2130 Ptz Network Camera

230 Mpeg2 Video Server

Configuration A

74 vulnerable

Vulnerable Software	Affected Versions
Axis 2100 Network Camera	Version 2.12
Axis 2100 Network Camera	Version 2.30
Axis 2100 Network Camera	Version 2.31
Axis 2100 Network Camera	Version 2.32
Axis 2100 Network Camera	Version 2.33
Axis 2100 Network Camera	Version 2.34
Axis 2100 Network Camera	Version 2.40
Axis 2100 Network Camera	Version 2.41
Axis 2110 Network Camera	Version 2.12
Axis 2110 Network Camera	Version 2.30
Axis 2110 Network Camera	Version 2.31
Axis 2110 Network Camera	Version 2.32
Axis 2110 Network Camera	Version 2.34
Axis 2110 Network Camera	Version 2.40
Axis 2110 Network Camera	Version 2.41
Axis 2120 Network Camera	Version 2.12
Axis 2120 Network Camera	Version 2.30
Axis 2120 Network Camera	Version 2.31
Axis 2120 Network Camera	Version 2.32
Axis 2120 Network Camera	Version 2.34
Axis 2120 Network Camera	Version 2.40
Axis 2120 Network Camera	Version 2.41
Axis 2130 Ptz Network Camera	Version 2.30
Axis 2130 Ptz Network Camera	Version 2.31
Axis 2130 Ptz Network Camera	Version 2.32
Axis 2130 Ptz Network Camera	Version 2.34
Axis 2130 Ptz Network Camera	Version 2.40
Axis 230 Mpeg2 Video Server	Version 3.11
Axis 2400 Video Server	Version 1.10
Axis 2400 Video Server	Version 1.11
Axis 2400 Video Server	Version 1.12
Axis 2400 Video Server	Version 1.15
Axis 2400 Video Server	Version 1.1
Axis 2400 Video Server	Version 1.2
Axis 2400 Video Server	Version 2.0
Axis 2400 Video Server	Version 2.20
Axis 2400 Video Server	Version 2.30
Axis 2400 Video Server	Version 2.31
Axis 2400 Video Server	Version 2.32
Axis 2400 Video Server	Version 2.33
Axis 2400 Video Server	Version 2.34
Axis 2400 Video Server	Version 3.11
Axis 2400 Video Server	Version 3.12
Axis 2401 Video Server	Version 1.0_1
Axis 2401 Video Server	Version 1.15
Axis 2401 Video Server	Version 2.20
Axis 2401 Video Server	Version 2.30
Axis 2401 Video Server	Version 2.31
Axis 2401 Video Server	Version 2.32
Axis 2401 Video Server	Version 2.33
Axis 2401 Video Server	Version 2.34
Axis 2401 Video Server	Version 3.12
Axis 2401 Video Server	Version 3.13
Axis 2411 Video Server	Version 3.12
Axis 2411 Video Server	Version 3.13
Axis 2420 Network Camera	Version 2.12
Axis 2420 Network Camera	Version 2.30
Axis 2420 Network Camera	Version 2.31
Axis 2420 Network Camera	Version 2.32
Axis 2420 Network Camera	Version 2.33
Axis 2420 Network Camera	Version 2.34
Axis 2420 Network Camera	Version 2.40
Axis 2420 Network Camera	Version 2.41
Axis 2420 Video Server	Version 2.32
Axis 2420 Video Server	Version 2.34
Axis 2460 Network Dvr	All versions
Axis 2460 Network Dvr	Version 3.10
Axis 2460 Network Dvr	Version 3.11
Axis 2490 Serial Server	All versions
Axis 2490 Serial Server	Version 2.11.3
Axis 250s Video Server	All versions
Axis 250s Video Server	Version 3.03
Axis 250s Video Server	Version 3.10
Axis Storpoint Cd	All versions