CVE-2023-22984

** UNSUPPORTED WHEN ASSIGNED ** A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL.

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://d0ub1e-d.github.io/2022/12/30/exploit-db-1/	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:h:axis:207w:-:*:*:*:*:*:*:*

cpe:2.3:o:axis:207w_firmware:-:*:*:*:*:*:*:*

History

03 Mar 2023, 15:15

Type	Values Removed	Values Added
Summary	~~A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL.~~	UNSUPPORTED WHEN ASSIGNED A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL.

02 Mar 2023, 16:24

Type	Values Removed	Values Added
CWE		CWE-79
CPE		cpe:2.3:h:axis:207w:-:::::::* cpe:2.3:o:axis:207w_firmware:-:::::::*
References	~~(MISC) https://d0ub1e-d.github.io/2022/12/30/exploit-db-1/ -~~	(MISC) https://d0ub1e-d.github.io/2022/12/30/exploit-db-1/ - Exploit, Third Party Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.1

21 Feb 2023, 17:12

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-02-21 16:15

Updated : 2024-08-02 11:15

NVD link : CVE-2023-22984

Mitre link : CVE-2023-22984

CVE.ORG link : CVE-2023-22984

JSON object : View

Products Affected

axis

207w_firmware
207w

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

6.1 /10