Lucene search

AxisCVE-2021-31989

HistoryAug 25, 2021 - 7:15 p.m.

CVE-2021-31989

2021-08-2519:15:11

CWE-312

Axis

web.nvd.nist.gov

cve-2021-31989

axis device manager

windows task manager

memory dump

credentials

security vulnerability

nvd

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

39.4%

JSON

A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices.

Affected configurations

Nvd

Node

axisdevice_managerRange5.00.010–5.16.063

VendorProductVersionCPE
axisdevice_manager*cpe:2.3:a:axis:device_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
axis	device_manager	*	cpe:2.3:a:axis:device_manager::::::::

CNA Affected

[
  {
    "product": "Axis Device Manager",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "From Axis Device Manager 5.00.010"
      }
    ]
  }
]

References

www.axis.com/files/tech_notes/CVE-2021-31989.pdf

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

39.4%

JSON

Related for CVE-2021-31989