CVE-2023-21414

🗓️ 16 Oct 2023 06:18:06Reported by AxisType

NCC Group discovered a flaw in Axis Communications' device tampering protection, allowing sophisticated attacks to bypass Secure Boot

Reporter	Title	Published	Views	Family All 10
CNNVD	AXIS OS Security Vulnerability	16 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-21414	16 Oct 202306:18	–	cvelist
EUVD	EUVD-2023-25582	3 Oct 202520:07	–	euvd
NVD	CVE-2023-21414	16 Oct 202307:15	–	nvd
OpenVAS	AXIS OS Secure Boot Bypass Vulnerability (Oct 2023)	23 Oct 202300:00	–	openvas
OSV	CVE-2023-21414	16 Oct 202307:15	–	osv
Prion	Design/Logic Flaw	16 Oct 202307:15	–	prion
Positive Technologies	PT-2023-18185 · Axis Communications · Axis Os	16 Oct 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-21414	23 May 202502:50	–	redhatcve
Vulnrichment	CVE-2023-21414	16 Oct 202306:18	–	vulnrichment

NVD

Node

axis axis_osRange10.11.55–10.12.206

axis axis_osRange11.0.89–11.6.94active

AND

axis m3215Match-

axis m3216Match-

axis m4317-plveMatch-

axis m4318-plveMatch-

axis m4327-pMatch-

axis m4328-pMatch-

axis p1467-leMatch-

axis p1468-leMatch-

axis p1468-xleMatch-

axis p3265-lvMatch-

axis p3265-lveMatch-

axis p3265-vMatch-

axis p3267-lvMatch-

axis p3267-lveMatch-

axis p3268-lvMatch-

axis p3268-lveMatch-

axis p3827-pveMatch-

axis p4705-plveMatch-

axis p4707-plveMatch-

axis q1656Match-

axis q1656-bMatch-

axis q1656-beMatch-

axis q1656-bleMatch-

axis q1656-dleMatch-

axis q1656-leMatch-

axis q1961-teMatch-

axis q2101-teMatch-

axis q3536-lveMatch-

axis q3538-lveMatch-

axis q3626-veMatch-

axis q3628-veMatch-

axis xfq1656Match-

Node

axis axis_osRange<11.6.94active

AND

axis a8207-ve_mk_iiMatch-

Node

axis axis_osRange10.11.55–10.12.206

axis axis_osRange11.0.89–11.6.94active

AND

axis q3527-lveMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "ARTPEC 8"
    ],
    "product": "AXIS OS",
    "vendor": "Axis Communications AB",
    "versions": [
      {
        "status": "affected",
        "version": "AXIS OS 10.11 - 11.5"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXIS A8207-VE Mk II",
    "vendor": "Axis Communications AB",
    "versions": [
      {
        "status": "affected",
        "version": "AXIS OS 11.5 or earlier"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXIS Q3527-LVE",
    "vendor": "Axis Communications AB",
    "versions": [
      {
        "status": "affected",
        "version": "AXIS OS 10.11 - 11.5"
      }
    ]
  }
]

Source	Link
axis	www.axis.com/dam/public/45/3c/a1/cve-2023-21414pdf-en-US-412758.pdf

17 Jun 2026 05:32Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.8 - 7.1

EPSS0.00232

SSVC

CWE-121