Read the docs

Axis Communications AB

Records124All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high46CVSS 7.0–8.9

Exploited now

Axis Communications AB records in CISA KEV

No Axis Communications AB vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in M3024-lve Firmware · all components

TI-2023-05220 CVE-2023-5677 · GHSA-wpw2-f6x3-8f7j

OS command injection in AXIS OS

Priority MEDIUM 41

Brandon Rothel from QED Secure Solutions and Sam Hanson of Dragos have found that the VAPIX API tcptest.cgi did not have a sufficient input validation allowing for a possible remote code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0056 Published 2024-02-05 No fix listed CWE-78
Open these records in search →