Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
Name | Vendor | Start Version | End Version |
---|---|---|---|
700_network_document_server | Axis | 1.0 | 1.0 |
700_network_document_server | Axis | 1.10 | 1.10 |
700_network_document_server | Axis | 1.11 | 1.11 |
700_network_document_server | Axis | 1.12 | 1.12 |
700_network_document_server | Axis | 1.13 | 1.13 |
700_network_document_server | Axis | 1.14 | 1.14 |