Lucene search

AxisCVE-2023-21409

HistoryAug 03, 2023 - 7:15 a.m.

CVE-2023-21409

2023-08-0307:15:12

CWE-755

Axis

web.nvd.nist.gov

cve-2023-21409

file permissions

unauthorized access

unencrypted credentials

application configuration

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

64.8%

JSON

Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator
credentials allowing the configuration of the application.

Affected configurations

Nvd

Node

axislicense_plate_verifierRange≤2.8.3

VendorProductVersionCPE
axislicense_plate_verifier*cpe:2.3:a:axis:license_plate_verifier:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
axis	license_plate_verifier	*	cpe:2.3:a:axis:license_plate_verifier::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "AXIS License Plate Verifier ",
    "vendor": "Axis Communications AB",
    "versions": [
      {
        "status": "affected",
        "version": "2.8.3 or earlier"
      }
    ]
  }
]

References

www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

64.8%

JSON

Related for CVE-2023-21409