What is CVE-2021-43442?

CVE-2021-43442 is a high-severity vulnerability in I3international Ax46. CVSS score: 8.1/10. Published 2022-04-11.

How severe is CVE-2021-43442?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in I3international Ax46

CVE-2021-43442

A Logic Flaw vulnerability exists in i3 International Inc Annexxus Camera V5.2.0 build 150317 (Ax46), V5.0.9 build 151106 (Ax68), and V5.0.9 build 150615 (Ax78) due to a failure to allow the creation of more than one administrator account; however, this can be bypassed by parameter maniulation using PUT and DELETE and by calling the 'UserPermission' endpoint with the ID of created account and set it to 'admin' userType, successfully adding a second administrative account.

EPSS: 0.010 (58.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

I3international Ax46
I3international Ax46_firmware — versions 5.2.0
I3international Ax68
I3international Ax68_firmware — versions 5.0.9
I3international Ax78
I3international Ax78_firmware — versions 5.0.9
N/a — versions n/a

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-43442?: CVE-2021-43442 is a high-severity vulnerability in I3international Ax46. CVSS score: 8.1/10. Published 2022-04-11.
How severe is CVE-2021-43442?: High severity. CVSS v3 base score is 8.1 out of 10.