Improper privilege management in AXIS OS
Priority MEDIUM 45CWE-269Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-269.
Summary
A vulnerability, was found in legacy Axis devices such as P3225 and M3005. This affects an unknown part of the component CGI Script. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely.
Why it matters now
EPSS 0.01583 75th percentileScored 2026-11-07
Fix Fixed AXIS OS: 5.65
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | AXIS OS | before 5.65 | 5.65 | Patch available | CNA |
- AXIS OS Vendor— Affected before 5.65 Fixed in 5.65 Patch available CNA
CPE configurations NVD · 12
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:axis:p1204_firmware:*:*:*:*:*:*:*:* | up to 5.50.4 | Vulnerable | Axis Communications AB |
| cpe:2.3:h:axis:p1204:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Axis Communications AB |
| cpe:2.3:o:axis:p3225_firmware:*:*:*:*:*:*:*:* | up to 6.30.1 | Vulnerable | Axis Communications AB |
| cpe:2.3:h:axis:p3225:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Axis Communications AB |
| cpe:2.3:o:axis:p3367_firmware:*:*:*:*:*:*:*:* | up to 6.10.1.2 | Vulnerable | Axis Communications AB |
| cpe:2.3:h:axis:p3367:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Axis Communications AB |
| cpe:2.3:o:axis:m3045_firmware:*:*:*:*:*:*:*:* | up to 6.15.4.1 | Vulnerable | Axis Communications AB |
| cpe:2.3:h:axis:m3045:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Axis Communications AB |
| cpe:2.3:o:axis:m3005_firmware:*:*:*:*:*:*:*:* | up to 5.50.5.7 | Vulnerable | Axis Communications AB |
| cpe:2.3:h:axis:m3005:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Axis Communications AB |
- cpe:2.3:o:axis:p1204_firmware:*:*:*:*:*:*:*:* Versions up to 5.50.4 Vulnerable ·Axis Communications AB
- cpe:2.3:h:axis:p1204:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Axis Communications AB
- cpe:2.3:o:axis:p3225_firmware:*:*:*:*:*:*:*:* Versions up to 6.30.1 Vulnerable ·Axis Communications AB
- cpe:2.3:h:axis:p3225:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Axis Communications AB
- cpe:2.3:o:axis:p3367_firmware:*:*:*:*:*:*:*:* Versions up to 6.10.1.2 Vulnerable ·Axis Communications AB
- cpe:2.3:h:axis:p3367:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Axis Communications AB
- cpe:2.3:o:axis:m3045_firmware:*:*:*:*:*:*:*:* Versions up to 6.15.4.1 Vulnerable ·Axis Communications AB
- cpe:2.3:h:axis:m3045:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Axis Communications AB
- cpe:2.3:o:axis:m3005_firmware:*:*:*:*:*:*:*:* Versions up to 5.50.5.7 Vulnerable ·Axis Communications AB
- cpe:2.3:h:axis:m3005:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Axis Communications AB
Show 2 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:axis:m3007_firmware:*:*:*:*:*:*:*:* | up to 6.30.1.1 | Vulnerable | Axis Communications AB |
| cpe:2.3:h:axis:m3007:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Axis Communications AB |
- cpe:2.3:o:axis:m3007_firmware:*:*:*:*:*:*:*:* Versions up to 6.30.1.1 Vulnerable ·Axis Communications AB
- cpe:2.3:h:axis:m3007:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Axis Communications AB
Remediation
- Fix · CNA AXIS OS Fixed in 5.65
Timeline
- 2026-10-02 Threatist record created from CVE-2017-20049
- 2026-10-03 Alias added: GHSA-mh3r-vrg4-68p4
Sources
- CVE-2017-20049 · CVE Program
- CVE-2017-20049 · NVD
- FIRST EPSS
- GHSA-mh3r-vrg4-68p4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences