AO
Product
Axis OS 2022
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 5Low 1
Watch
Add Axis OS 2022 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5800 | 8.8 | Feb 5 | Insufficient input validation in VAPIX API create_overlay.cgi Affected: before 10.12.220 |
| CVE-2023-21415 | 8.1 | Oct 16 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion Affected: before 10.12.206 |
| CVE-2023-21418 | 7.1 | Nov 21 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion Affected: before 10.12.213 |
| CVE-2023-21417 | 7.1 | Nov 21 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversal attacks that allows for file/folder… Affected: before 10.12.208 |
| CVE-2023-5553 | 6.8 | Nov 21 | During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making… Affected: before 10.12.213 |
| CVE-2024-0055 | 6.5 | Mar 19 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a… Affected: before 10.12.228 |
| CVE-2023-21416 | 6.5 | Nov 21 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable to a Denial-of-Service attack allowing for an attacker to… Affected: before 10.12.213 |
| CVE-2024-0066 | 5.3 | Jun 18 | Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may expose sensitive traffic between the client (Axis device) and (O3C) server Affected: before 10.12.236 |
| CVE-2024-47261 | 4.3 | Apr 8 | 51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload… Affected: before 10.12.276 |
| CVE-2024-8160 | 2.7 | Nov 26 | Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command… Affected: before 10.12.257 |
Showing 10