TELNET: Axis StorPoint CD E100 Default Telnet Login

This signature detects a default login attempt to an Axis StorPoint CD E100 through Telnet. This login can also be present on other Axis systems.

Extended Description

Multiple vulnerabilities are reported to reside in multiple Axis network video and camera servers: 1. A shell metacharacter command-execution vulnerability allows an anonymous user to download the contents of the '/etc/passwd' file on the device. Other commands are also likely to work, facilitating other attacks. This issue is reported to affect: - Axis 2100, 2110, 2120, 2420 network cameras with firmware versions 2.34 thru 2.40 - Axis 2130 network cameras - Axis 2401 and 2401 video servers 2. A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authentication checks and gives anonymous users remote adminitration of the devices. This issue is reported to affect: - Axis 2100, 2110, 2120, 2420 network cameras with firmware versions 2.12 thru 2.40 - Axis 2130 network cameras - Axis 2401,and 2401 video servers 3. A hardcoded backdoor administrative-user issue allows remote attackers to administer affected devices. This likely cannot be disabled. This issue is reported to affect: - Axis StorePoint CD E100 CD-ROM Server with firmware version 5.30 Other products and versions of firmware are likely affected by one or more of these vulnerabilities.

Affected Products

Axis_communications 2411_video_server

References

BugTraq: 11011

URL: http://www.axis.com/products/camera_servers/index.htm http://www.securityfocus.com/archive/1/372630 http://www.securityfocus.com/archive/1/372643

Short Name

TELNET:USER:AXIS-COPYRIGHT

Severity

Major

Recommended

False

Recommended Action

None

TELNET: Axis StorPoint CD E100 Default Telnet Login

Extended Description

Affected Products

References

Found a potential security threat?