Intitle Axis 2400 Video Server 〈Trusted — Manual〉

Note: The Axis 2400 is a legacy product (discontinued). It was revolutionary in the early 2000s for converting analog CCTV cameras into network/IP cameras.

---

I/O Ports

• Digital I/O: Featured digital input and output ports for connecting external alarm devices (e.g., door sensors, motion detectors) and relays (e.g., activating a lock or siren).

---

5. Factory Reset Procedure (Axis 2400)

If you have physical access:

1. Power off the unit.
2. Locate the Control button (small pinhole or button inside the unit near the connectors).
3. Press and hold the button while powering on.
4. Hold for about 15-20 seconds until the Status LED flashes amber/red.
5. Release. The unit resets to 192.168.0.90 with default factory settings (no root password or default root/blank).

7. Security Risks of Exposed Axis 2400 Units

If you find one via intitle "axis 2400 video server": intitle axis 2400 video server

• No encryption – HTTP basic auth sends passwords in base64 (easily decoded).
• No HTTPS support on most firmware versions.
• Known vulnerabilities – Unpatched firmware (end-of-life) may have remote code execution flaws (CVE-2006-2614, etc.).
• Default credentials – Many owners never changed them.

If you are responsible for one still online: Note: The Axis 2400 is a legacy product (discontinued)

• Immediately disconnect it from the internet.
• Replace with a modern encoder (Axis M70 series or newer) or IP cameras.
• If it must stay internal, firewall it completely – do not port forward.

C. Security Training Lab

Teach students about IP networking, ONVIF (the 2400 is pre-ONVIF, but can emulate via scripts), and the evolution of compression standards. I/O Ports