The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required.

The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required.

The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack. The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack. The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation. The AXIS Camera Station Server had a flaw that allowed users to bypass authentication that is normally required.

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Axis Camera Station und Axis Device Manager ausnutzen, um die Authentifizierung zu umgehen, erhöhte Privilegien zu erlangen, eine Man-in-the-Middle-Attacke durchzuführen und beliebigen Code auszuführen.