Lucene search
K

CVE-2023-21418

🗓️ 21 Nov 2023 06:56:09Reported by AxisType 
cve
 cve
🔗 web.nvd.nist.gov👁 40 Views

Sandro Poppi found VAPIX API irissetup.cgi vulnerability (CVE-2023-21418) allowing path traversal attacks for file deletion, mitigated by operator/admin authentication. Patched by Axis

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
CNNVD
AXIS OS Path Traversal Vulnerability
21 Nov 202300:00
cnnvd
Cvelist
CVE-2023-21418
21 Nov 202306:56
cvelist
EUVD
EUVD-2023-25586
3 Oct 202520:07
euvd
NVD
CVE-2023-21418
21 Nov 202307:15
nvd
OSV
CVE-2023-21418
21 Nov 202307:15
osv
Prion
Path traversal
21 Nov 202307:15
prion
Positive Technologies
PT-2023-7489 · Axis Communications · Axis Os
21 Nov 202300:00
ptsecurity
RedhatCVE
CVE-2023-21418
23 May 202501:49
redhatcve
Vulnrichment
CVE-2023-21418
21 Nov 202306:56
vulnrichment
NVD
Node
axisaxis_osRange<6.50.5.15-
OR
axisaxis_osRange<11.7.57active
OR
axisaxis_os_2018Range<8.40.35lts
OR
axisaxis_os_2020Range<9.80.49lts
OR
axisaxis_os_2022Range<10.12.213lts
[
  {
    "defaultStatus": "unaffected",
    "product": "AXIS OS",
    "vendor": "Axis Communications AB",
    "versions": [
      {
        "status": "affected",
        "version": "AXIS OS 6.50 – 11.6"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation