High severity8.8NVD Advisory· Published May 2, 2017· Updated Jun 17, 2026
CVE-2015-8257
CVE-2015-8257
Description
The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell metacharacters in the app parameter to (1) app_license.shtml, (2) app_license_custom.shtml, (3) app_index.shtml, or (4) app_params.shtml.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:o:axis:network_camera_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:axis:network_camera_firmware:-:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/138083/AXIS-Authenticated-Remote-Command-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/40171/nvdExploitThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/92159nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.