Description
The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote attackers to obtain sensitive information by sniffing the wireless network or by leveraging unspecified other vectors.
References
- 20070915 Axis 207W Wireless Camera Web Interface - Multiple Vulnerabilities mailing-list
- 3145 third-party-advisory
- http://airscanner.com/security/07080701_axis.htm
- 1018699 vdb-entry
- http://www.informit.com/articles/article.aspx?p=1016102