Axis License Plate Verifier
6 CVEs affecting Axis License Plate Verifier. Latest disclosed: 2023-08-03. Critical: 0, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21407 | High | 8.8 | 2023-08-03 | A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges. |
CVE-2023-21409 | High | 8.4 | 2023-08-03 | Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configuration of the applicat… |
CVE-2023-21408 | High | 8.4 | 2023-08-03 | Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards… |
CVE-2023-21412 | High | 7.2 | 2023-08-03 | User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections. |
CVE-2023-21411 | High | 7.2 | 2023-08-03 | User provided input is not sanitized in the “Settings > Access Control” configuration interface allowing for arbitrary code execution. |
CVE-2023-21410 | High | 7.2 | 2023-08-03 | User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code execution. |