Lucene search

AxisCVE-2023-21408

HistoryAug 03, 2023 - 7:15 a.m.

CVE-2023-21408

2023-08-0307:15:12

CWE-755

Axis

web.nvd.nist.gov

cve-2023-21408

file permissions

unprivileged users

user credentials

3rd party integration

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

64.8%

JSON

Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials
that are used in the integration interface towards 3rd party systems.

Affected configurations

Nvd

Node

axislicense_plate_verifierRange≤2.8.3

VendorProductVersionCPE
axislicense_plate_verifier*cpe:2.3:a:axis:license_plate_verifier:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
axis	license_plate_verifier	*	cpe:2.3:a:axis:license_plate_verifier::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "AXIS License Plate Verifier",
    "vendor": "Axis Communications AB",
    "versions": [
      {
        "status": "affected",
        "version": "2.8.3 or earlier"
      }
    ]
  }
]

References

www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

64.8%

JSON

Related for CVE-2023-21408