What is CVE-2023-21405?

CVE-2023-21405 is a medium-severity vulnerability in Axis A1001, classified under CWE-1286. CVSS score: 6.5/10. Published 2023-07-25.

How severe is CVE-2023-21405?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Axis A1001

CVE-2023-21405

Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability…

EPSS: 0.003 (17.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Axis A1001
Axis A1001_firmware
Axis A1210_\(-b\)
Axis A1210_\(-b\)_firmware
Axis A1601
Axis A1601_firmware
Axis A1610_\(-b\)
Axis A1610_\(-b\)_firmware
Axis A8207
Axis A8207_mkii

Weakness classification (CWE)

CWE-1286
CWE-754 — Improper Check for Unusual or Exceptional Conditions

References

product-security@axis.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-21405?: CVE-2023-21405 is a medium-severity vulnerability in Axis A1001, classified under CWE-1286. CVSS score: 6.5/10. Published 2023-07-25.
How severe is CVE-2023-21405?: Medium severity. CVSS v3 base score is 6.5 out of 10.