Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| 700_network_document_server | Axis | 1.0 (including) | 1.0 (including) |
| 700_network_document_server | Axis | 1.10 (including) | 1.10 (including) |
| 700_network_document_server | Axis | 1.11 (including) | 1.11 (including) |
| 700_network_document_server | Axis | 1.12 (including) | 1.12 (including) |
| 700_network_document_server | Axis | 1.13 (including) | 1.13 (including) |
| 700_network_document_server | Axis | 1.14 (including) | 1.14 (including) |