CVE-2015-8257
High · 8.8CVSS
8.8
EPSS
17.7%
Published
May 2, 2017
CISA due date
—
The record
The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell metacharacters in the app parameter to (1) app_license.shtml, (2) app_license_custom.shtml, (3) app_index.shtml, or (4) app_params.shtml.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119586 SQLite command-line shell through 3.54.1 contains a command injection vulnerability in… CWE-77
- CVE-2026-108329 Tanium addressed an unauthorized code execution vulnerability in Threat Response. CWE-77
- CVE-2026-108303 Tanium addressed an unauthorized code execution vulnerability in Certificate Manager. CWE-77
- CVE-2026-93865 A missing authentication vulnerability in the Fireware OS FireCluster synchronization… CWE-77
- CVE-2026-117511 A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. CWE-77
- CVE-2026-90465 A missing authentication vulnerability in the FireCluster Sync processing allows an… CWE-77
- CVE-2026-107672 A maliciously crafted .stack.json file can trigger a trusted Markdown injection… CWE-77
- CVE-2026-116506 A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. CWE-77