CVE-2023-21405
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2023-21405 is a vulnerability found in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP. The flaw causes the OSDP message parser to crash the pacsiod process, resulting in a temporary unavailability of door-controlling functionalities, preventing doors from being opened or closed. However, no sensitive or customer data can be extracted, and the Axis device is not further compromised. It is advised to refer to the Axis security advisory for detailed information on affected products and software versions, as well as mitigation measures. The vulnerability has a risk score of 26 and a base severity rating of MEDIUM according to [email protected]. The exploitability score is 2.8, indicating a low attack complexity, while the impact score is 3.6 with high availability impact on affected systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions