AXIS OS Security Vulnerability

AXIS Os is an edge device operating system from the Swedish company Axis. AXIS OS suffers from a security vulnerability that stems from the VAPIX API dynamicoverlay.cgi being susceptible to a denial of service attack, which could allow an attacker to block access to the overlay configuration page...

CVE-2023-21413

GoSecure on behalf of Genetec Inc. has found a flaw that allows for a remote code execution during the installation of ACAP applications on the Axis device. The application handling service in AXIS OS was vulnerable to command injection allowing an attacker to run arbitrary code. Axis has release...

CVE-2023-21414

NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering commonly known as Secure Boot contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AX...

Axis OS security vulnerabilities

Axis Os is an edge device operating system from Axis of Sweden. A security vulnerability exists in Axis devices AXIS OS version 5.51 and later versions, which stems from a failure to properly validate user control parameters related to the SMTP test function...

Axis Os injection vulnerability

Axis Os is an edge device operating system from Axis of Sweden. An injection vulnerability exists in Axis devices AXIS OS version 5.51 and later versions, which stems from a failure to properly validate a control parameter related to the SMTP test function, and as a result, it is possible to add...