Axis OS vulnerabilities

2 known vulnerabilities in Axis OS from Axis. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  AXIS OS: Incorrect Authorization

  CVE-2024-6979Sep 10, 2024Axis Communications AB

  Amin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a broken access control which would lead to less-privileged operator- and/or viewer accounts having more privileges than designed. The risk of exploitation is very low as it requires complex s

• 7.2 High severity

  AXIS OS: Improper Neutralization of Special Elements used in a Command

  CVE-2023-21413Oct 16, 2023Axis Communications ABEPSS 1.47%

  GoSecure on behalf of Genetec Inc. has found a flaw that allows for a remote code execution during the installation of ACAP applications on the Axis device. The application handling service in AXIS OS was vulnerable to command injection allowing an attacker to