AO
Product
Axis OS 2022
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 5Low 1
Watch
Add Axis OS 2022 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5553 | 6.8 | Nov 21 | During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making… Affected: before 10.12.213 |
| CVE-2024-0055 | 6.5 | Mar 19 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a… Affected: before 10.12.228 |
| CVE-2023-21416 | 6.5 | Nov 21 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable to a Denial-of-Service attack allowing for an attacker to… Affected: before 10.12.213 |
| CVE-2024-0066 | 5.3 | Jun 18 | Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may expose sensitive traffic between the client (Axis device) and (O3C) server Affected: before 10.12.236 |
| CVE-2024-47261 | 4.3 | Apr 8 | 51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload… Affected: before 10.12.276 |
Showing 5