Unscored severity · published May 15, 2007
CVE-2007-2680
Cross-site scripting (XSS) vulnerability in the management interface in Canon Network Camera Server VB100 and VB101 with firmware 3.0 R69 and earlier, and VB150 with firmware 1.1…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the management interface in Canon Network Camera Server VB100 and VB101 with firmware 3.0 R69 and earlier, and VB150 with firmware 1.1 R39 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NC
Network Camera Server Vb100 · Canon
3.0 · source: NVD
NC
Network Camera Server Vb101 · Canon
3.0 · source: NVD
NC
Network Camera Server Vb150 · Canon
1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2680
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2680
cweb.canon.jp
http://cweb.canon.jp/drv-upd/webview/notification.html
jvn.jp
http://jvn.jp/jp/JVN%2306735665/
osvdb.org
http://osvdb.org/35019
Patch
http://secunia.com/advisories/24940
www.securityfocus.com
http://www.securityfocus.com/bid/23560
www.vupen.com
http://www.vupen.com/english/advisories/2007/1461