Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Axis 700 Scanner admin URLs reachable without password

CVE-2000-0144 · published 26 years ago
Summary

The Axis 700 Network Scanner allows its administrative web pages to be reached without proper login checks. This means an attacker could change settings or view sensitive information without a password. Apply the vendor's security update and limit network access to the scanner's management interface.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
axis 700_network_document_server 1.0
1.10
1.11
1.12
1.13
1.14
cpe:2.3:h:axis:700_network_document_server:1.0:*:*:*:*:*:*:*
Original advisory text
Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Timeline
Published7 Feb 2000
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2000-0144 · NVD
Track software like this
Free during beta