CVE-2023-21416

Name of the Vulnerable Software and Affected Versions AXIS OS (affected versions not specified)

Description The VAPIX API dynamicoverlay.cgi is vulnerable to a Denial-of-Service attack, allowing an attacker to block access to the overlay configuration page in the web interface of the Axis device. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. The impact of the attack is significant, as it can cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.