CVE-2023-21408

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-21408

8.4 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards 3rd party systems.

References
Link Resource
https://www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf Vendor Advisory
https://www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:axis:license_plate_verifier:*:*:*:*:*:*:*:*
History

21 Nov 2024, 07:42

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 9.8 		v2 : unknown
v3 : 8.4
References () https://www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf - Vendor Advisory () https://www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf - Vendor Advisory
Information

Published : 2023-08-03 07:15

Updated : 2024-11-21 07:42

NVD link : CVE-2023-21408

Mitre link : CVE-2023-21408

CVE.ORG link : CVE-2023-21408

JSON object : View

Products Affected

axis

CWE
CWE-755

Improper Handling of Exceptional Conditions