PT-2023-7483 · Axis · Axis Network Intercoms+1

CVE-2023-21405

·

Publicado

2023-07-25

·

Atualizado

2024-11-08

CVSS v3.1

6.5

Média

VetorAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Axis Network Door Controllers and Axis Network Intercoms (affected versions not specified)
Description The issue is related to a flaw in the implementation of the Open Supervised Device Protocol (OSDP) in Axis Network Door Controllers and Axis Network Intercoms. This flaw causes the OSDP message parser to crash the pacsiod process, resulting in a temporary unavailability of door-controlling functionalities, meaning doors cannot be opened or closed. No sensitive or customer data can be extracted as the Axis device is not further compromised.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Check for Exceptional Conditions

Improper Resource Release

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-08527
CVE-2023-21405

Produtos afetados

Axis Network Door Controllers
Axis Network Intercoms