Critical severity9.8NVD Advisory· Published Jun 15, 2022· Updated Jun 17, 2026

CVE-2017-20049

Description

A vulnerability, was found in legacy Axis devices such as P3225 and M3005. This affects an unknown part of the component CGI Script. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely.

Affected products

Axis/M3005 Firmware
cpe:2.3:o:axis:m3005_firmware:*:*:*:*:*:*:*:*
Range: <=5.50.5.7
Axis/M3007 Firmware
cpe:2.3:o:axis:m3007_firmware:*:*:*:*:*:*:*:*
Range: <=6.30.1.1
Axis/M3045 Firmware
cpe:2.3:o:axis:m3045_firmware:*:*:*:*:*:*:*:*
Range: <=6.15.4.1
Axis/P1204 Firmware
cpe:2.3:o:axis:p1204_firmware:*:*:*:*:*:*:*:*
Range: <=5.50.4
Axis/P3225 Firmware
cpe:2.3:o:axis:p3225_firmware:*:*:*:*:*:*:*:*
Range: <=6.30.1
Axis/P3367 Firmware
cpe:2.3:o:axis:p3367_firmware:*:*:*:*:*:*:*:*
Range: <=6.10.1.2
Axis/legacy Axis devicesdescription
Axis/P3225llm-create
Axis/M3005llm-create

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2017-20049

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions