Read the docs
TI-2023-05220 Aliases CVE-2023-5677GHSA-wpw2-f6x3-8f7j

OS command injection in AXIS OS

Priority MEDIUM 41CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-78.

Summary

Brandon Rothel from QED Secure Solutions and Sam Hanson of Dragos have found that the VAPIX API tcptest.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. The impact of exploiting this vulnerability is lower with operator-privileges compared to administrator-privileges service accounts. Please refer to the Axis security advisory for more information and solution.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0056 46th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Axis Communications ABAXIS OSAXIS OS 5.51; AXIS OS 6.50—No fix listedCNA

CPE configurations NVD · 22

CPEVersionsRoleVendor
cpe:2.3:o:axis:m3024-lve_firmware:*:*:*:*:*:*:*:*before 5.51.7.7VulnerableAxis Communications AB
cpe:2.3:h:axis:m3024-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:o:axis:m3025-ve_firmware:*:*:*:*:*:*:*:*before 5.51.7.7VulnerableAxis Communications AB
cpe:2.3:h:axis:m3025-ve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:o:axis:m7014_firmware:*:*:*:*:*:*:*:*before 5.51.7.7VulnerableAxis Communications AB
cpe:2.3:h:axis:m7014:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:o:axis:m7016_firmware:*:*:*:*:*:*:*:*before 5.51.7.7VulnerableAxis Communications AB
cpe:2.3:h:axis:m7016:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:o:axis:p1214-e_firmware:*:*:*:*:*:*:*:*before 5.51.7.7VulnerableAxis Communications AB
cpe:2.3:h:axis:p1214-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
Show 12 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:axis:p7214_firmware:*:*:*:*:*:*:*:*before 5.51.7.7VulnerableAxis Communications AB
cpe:2.3:h:axis:p7214:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:o:axis:p7216_firmware:*:*:*:*:*:*:*:*before 5.51.7.7VulnerableAxis Communications AB
cpe:2.3:h:axis:p7216:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:o:axis:q7401_firmware:*:*:*:*:*:*:*:*before 5.51.7.7VulnerableAxis Communications AB
cpe:2.3:h:axis:q7401:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:o:axis:q7404_firmware:*:*:*:*:*:*:*:*before 5.51.7.7VulnerableAxis Communications AB
cpe:2.3:h:axis:q7404:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:o:axis:q7414_firmware:*:*:*:*:*:*:*:*before 5.51.7.7VulnerableAxis Communications AB
cpe:2.3:h:axis:q7414:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:o:axis:q7424-r_mk_ii_firmware:*:*:*:*:*:*:*:*before 5.51.3.9VulnerableAxis Communications AB
cpe:2.3:h:axis:q7424-r_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-5677
  2. 2026-10-03 Alias added: GHSA-wpw2-f6x3-8f7j

References

Advisory 1

Other 1

  • TI-2018-07542 An issue was discovered in multiple models of Axis IP Cameras. CVSS 3.0CRITICAL 9.8
  • TI-2018-07541 An issue was discovered in multiple models of Axis IP Cameras. CVSS 3.0CRITICAL 9.8
  • TI-2018-07543 An issue was discovered in multiple models of Axis IP Cameras. CVSS 3.0CRITICAL 9.8
  • TI-2018-07545 An issue was discovered in the httpd process in multiple models of Axis IP Cameras. CVSS 3.0HIGH 7.5
  • TI-2018-07544 An issue was discovered in multiple models of Axis IP Cameras. CVSS 3.0HIGH 7.5
  • TI-2018-07540 There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras… CVSS 3.0HIGH 7.5
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences