CVE-2023-21405
Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities meaning that doors cannot be opened or closed. No sensitive or customer data can be extracted as the Axis device is not further compromised. Please refer to the Axis security advisory for more information, mitigation and affected products and software versions.
Published:Jul 25, 2023
Last Modified:Nov 21, 2024
EPS:Jul 25, 2023
EPSS Score:0.00069
CVSS Score:6.5
Affected Products
Vendor
Product
Action
Vendor
Axis
Product
A1001
Axis
A1001
Vendor
Axis
Product
A1001 Firmware
Axis
A1001 Firmware
Vendor
Axis
Product
A1210 \(-b\)
Axis
A1210 \(-b\)
Vendor
Axis
Product
A1210 \(-b\) Firmware
Axis
A1210 \(-b\) Firmware
Vendor
Axis
Product
A1601
Axis
A1601
Vendor
Axis
Product
A1601 Firmware
Axis
A1601 Firmware
Vendor
Axis
Product
A1610 \(-b\)
Axis
A1610 \(-b\)
Vendor
Axis
Product
A1610 \(-b\) Firmware
Axis
A1610 \(-b\) Firmware
Vendor
Axis
Product
A8207
Axis
A8207
Vendor
Axis
Product
A8207 Mkii
Axis
A8207 Mkii
Vendor
Axis
Product
Axis Os
Axis
Axis Os
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
