CVE-2023-21414
6.8
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: NVD
Description
NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering (commonly known as Secure Boot) contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
Affected (3)
Configuration A
| Running on/with | Platform Versions |
|---|---|
Axis M3215 | All versions |
Axis M3216 | All versions |
Axis M4317 Plve | All versions |
Axis M4318 Plve | All versions |
Axis M4327 P | All versions |
Axis M4328 P | All versions |
Axis P1467 Le | All versions |
Axis P1468 Le | All versions |
Axis P1468 Xle | All versions |
Axis P3265 Lv | All versions |
Axis P3265 Lve | All versions |
Axis P3265 V | All versions |
Axis P3267 Lv | All versions |
Axis P3267 Lve | All versions |
Axis P3268 Lv | All versions |
Axis P3268 Lve | All versions |
Axis P3827 Pve | All versions |
Axis P4705 Plve | All versions |
Axis P4707 Plve | All versions |
Axis Q1656 | All versions |
Axis Q1656 B | All versions |
Axis Q1656 Be | All versions |
Axis Q1656 Ble | All versions |
Axis Q1656 Dle | All versions |
Axis Q1656 Le | All versions |
Axis Q1961 Te | All versions |
Axis Q2101 Te | All versions |
Axis Q3536 Lve | All versions |
Axis Q3538 Lve | All versions |
Axis Q3626 Ve | All versions |
Axis Q3628 Ve | All versions |
Axis Xfq1656 | All versions |
Configuration B
References (2)
Source: product-security@axis.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.