PT-2023-7485 · Axis · Axis License Plate Verifier

CVE-2023-21410

·

Publicado

2023-08-01

·

Atualizado

2024-11-08

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions AXIS License Plate Verifier (affected versions not specified)
Description The issue arises from insufficient input validation in the "api.cgi" file of the License Plate Verifier software, allowing for arbitrary code execution. This can be exploited by a remote attacker.
Recommendations For the AXIS License Plate Verifier, consider disabling access to the "api.cgi" endpoint until a patch is available. Restrict input to the "api.cgi" endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-08529
CVE-2023-21410

Produtos afetados

Axis License Plate Verifier