Axis Communications AB AXIS OS

• CVE-2023-21414 High 7.1 NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering (commonly known as Secure Boot) contains a flaw which provide 0.3%
• CVE-2023-21413 Critical 9.1 Remote code execution vulnerability during the installation of ACAP applications on the Axis device 1.5%
• CVE-2023-21404 Medium 4.1 AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code. The static RSA key is not used in any other secure communication nor can it be used to compr 0.3%
• CVE-2021-31988 Unrated A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and include arbitrary SM 1.0%
• CVE-2021-31987 Unrated A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients. 0.9%
• CVE-2021-31986 Unrated User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage. 0.8%