Axis OS 2018 vulnerabilities

2 known vulnerabilities in Axis OS 2018 from Axis. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  AXIS OS: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-21418Nov 21, 2023Axis Communications AB

  Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operator- or administrator-p

• 8.1 High severity

  AXIS OS: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-21415Oct 16, 2023Axis Communications AB

  Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operator- or administrator-