Read the docs
TI-2023-07806 Aliases CVE-2023-21405GHSA-m5vf-rp25-854p

Denial-of-Service vulnerability in Axis Network Door Controller's and Axis Network Intercom's OSDP communication

Priority LOW 29CWE-1286Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities meaning that doors cannot be opened or closed. No sensitive or customer data can be extracted as the Axis device is not further compromised. Please refer to the Axis security advisory for more information, mitigation and affected products and software versions.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00296 22nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Axis Communications ABAXIS A1001 Network Door ControllerAXIS OS 1.65.4 or earlier—No fix listedCNA
Axis Communications ABAXIS A1210-B Network Door ControllerAXIS OS 11.0 - 11.6.16.0—No fix listedCNA
Axis Communications ABAXIS A1601 Network Door ControllerAXIS OS 1.84.4 or earlier; AXIS OS 10.12.171.0 or earlier; AXIS OS 11.0 - 11.6.16.0—No fix listedCNA
Axis Communications ABAXIS A1610 (-B) Network Door ControllerAXIS OS 10.12.171.0 or earlier; AXIS OS 11.0 - 11.6.16.0—No fix listedCNA
Axis Communications ABAXIS A8207-VE Network Video Door StationAXIS OS 10.12.178 or earlier; AXIS OS AXIS OS 11.0 - 11.5.53—No fix listedCNA
Axis Communications ABAXIS A8207-VE Mk II Network Video Door StationAXIS OS 10.12.178 or earlier; AXIS OS AXIS OS 11.0 - 11.5.53—No fix listedCNA
  • AXIS A1001 Network Door Controller VendorAxis Communications AB Affected AXIS OS 1.65.4 or earlier Fixed in — No fix listed CNA
  • AXIS A1210-B Network Door Controller VendorAxis Communications AB Affected AXIS OS 11.0 - 11.6.16.0 Fixed in — No fix listed CNA
  • AXIS A1601 Network Door Controller VendorAxis Communications AB Affected AXIS OS 1.84.4 or earlier; AXIS OS 10.12.171.0 or earlier; AXIS OS 11.0 - 11.6.16.0 Fixed in — No fix listed CNA
  • AXIS A1610 (-B) Network Door Controller VendorAxis Communications AB Affected AXIS OS 10.12.171.0 or earlier; AXIS OS 11.0 - 11.6.16.0 Fixed in — No fix listed CNA
  • AXIS A8207-VE Network Video Door Station VendorAxis Communications AB Affected AXIS OS 10.12.178 or earlier; AXIS OS AXIS OS 11.0 - 11.5.53 Fixed in — No fix listed CNA
  • AXIS A8207-VE Mk II Network Video Door Station VendorAxis Communications AB Affected AXIS OS 10.12.178 or earlier; AXIS OS AXIS OS 11.0 - 11.5.53 Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:o:axis:a1001_firmware:*:*:*:*:*:*:*:*up to 1.65.4VulnerableAxis Communications AB
cpe:2.3:h:axis:a1001:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:o:axis:a1210_\(-b\)_firmware:*:*:*:*:*:*:*:*11.0 – 11.6.16.0VulnerableAxis Communications AB
cpe:2.3:h:axis:a1210_\(-b\):-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:o:axis:a1601_firmware:*:*:*:*:*:*:*:*up to 1.84.4; 10.0 – 10.12.171.0; 11.0 – 11.6.16.0VulnerableAxis Communications AB
cpe:2.3:h:axis:a1601:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:o:axis:a1610_\(-b\)_firmware:*:*:*:*:*:*:*:*up to 10.12.171.0; 11.0 – 11.6.16.0VulnerableAxis Communications AB
cpe:2.3:h:axis:a1610_\(-b\):-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:o:axis:axis_os:*:*:*:*:*:*:*:*up to 10.12.178; 11.0 – 11.5.53VulnerableAxis Communications AB
cpe:2.3:h:axis:a8207:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
  • cpe:2.3:o:axis:a1001_firmware:*:*:*:*:*:*:*:* Versions up to 1.65.4 Vulnerable ·Axis Communications AB
  • cpe:2.3:h:axis:a1001:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Axis Communications AB
  • cpe:2.3:o:axis:a1210_\(-b\)_firmware:*:*:*:*:*:*:*:* Versions 11.0 – 11.6.16.0 Vulnerable ·Axis Communications AB
  • cpe:2.3:h:axis:a1210_\(-b\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Axis Communications AB
  • cpe:2.3:o:axis:a1601_firmware:*:*:*:*:*:*:*:* Versions up to 1.84.4; 10.0 – 10.12.171.0; 11.0 – 11.6.16.0 Vulnerable ·Axis Communications AB
  • cpe:2.3:h:axis:a1601:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Axis Communications AB
  • cpe:2.3:o:axis:a1610_\(-b\)_firmware:*:*:*:*:*:*:*:* Versions up to 10.12.171.0; 11.0 – 11.6.16.0 Vulnerable ·Axis Communications AB
  • cpe:2.3:h:axis:a1610_\(-b\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Axis Communications AB
  • cpe:2.3:o:axis:axis_os:*:*:*:*:*:*:*:* Versions up to 10.12.178; 11.0 – 11.5.53 Vulnerable ·Axis Communications AB
  • cpe:2.3:h:axis:a8207:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Axis Communications AB
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:axis:a8207_mkii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-21405
  2. 2026-10-03 Alias added: GHSA-m5vf-rp25-854p

References

Advisory 1

  • TI-2018-07542 An issue was discovered in multiple models of Axis IP Cameras. CVSS 3.0CRITICAL 9.8
  • TI-2018-07541 An issue was discovered in multiple models of Axis IP Cameras. CVSS 3.0CRITICAL 9.8
  • TI-2018-07543 An issue was discovered in multiple models of Axis IP Cameras. CVSS 3.0CRITICAL 9.8
  • TI-2023-07807 Heap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication CVSS 3.1HIGH 8.8
  • TI-2018-07545 An issue was discovered in the httpd process in multiple models of Axis IP Cameras. CVSS 3.0HIGH 7.5
  • TI-2018-07544 An issue was discovered in multiple models of Axis IP Cameras. CVSS 3.0HIGH 7.5
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences