VULNERABILITY INTELLIGENCE
CVE-2007-4930
CVSS score4.3 MEDIUM
EPSS probability2.18%
CISA KEVNot currently listed
Published2007-09-18
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 207W camera allow remote attackers to perform certain actions as administrators via (1) axis-cgi/admin/restart.cgi, (2) the user and sgrp parameters to axis-cgi/admin/pwdgrp.cgi in an add action, or (3) the server parameter to admin/restartMessage.shtml.
Weakness classification
- CWE-352: Cross-Site Request Forgery (CSRF)