Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

TI-2023-05220 CVE-2023-5677 · GHSA-wpw2-f6x3-8f7j

OS command injection in AXIS OS

Priority MEDIUM 41

Brandon Rothel from QED Secure Solutions and Sam Hanson of Dragos have found that the VAPIX API tcptest.cgi did not have a sufficient input validation allowing for a possible remote code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0056 Published 2024-02-05 No fix listed CWE-78