CVE Vulnerabilities

CVE-2022-28860

Published: Jul 21, 2022 | Modified: Aug 08, 2023
CVSS 3.x
5.9
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An authentication downgrade in the server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart camera Axis M1125) to achieve HTTP access to the camera.

Affected Software

Name Vendor Start Version End Version
Citilog Citilog 8.0 (including) 8.0 (including)

References