CVE-2004-0334

InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admindetail.asp, (2) videophone_syscfg.asp…

published March 18, 2004

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admindetail.asp, (2) videophone_syscfg.asp, (3) videophone_upgrade.asp, or (4) videophone_sysctrl.asp that contains a trailing / (slash). NOTE: the original report mentioned AXIS 2100 Network Camera, but this was likely a cut-and-paste error.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01682 · 76.6th percentile
Published
2004-03-18T05:00Z
EPSS history
Timeline
  • 18 MAR 05:00Z
    InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admindetail.asp, (2) videophone_syscfg.asp…
    cvelistv5