CVE-2023-21405

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jul 25, 2023
Updated: Aug 2, 2023

Summary

CVE-2023-21405 is a vulnerability found in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP. The flaw causes the OSDP message parser to crash the pacsiod process, resulting in a temporary unavailability of door-controlling functionalities, preventing doors from being opened or closed. However, no sensitive or customer data can be extracted, and the Axis device is not further compromised. It is advised to refer to the Axis security advisory for detailed information on affected products and software versions, as well as mitigation measures. The vulnerability has a risk score of 26 and a base severity rating of MEDIUM according to [email protected]. The exploitability score is 2.8, indicating a low attack complexity, while the impact score is 3.6 with high availability impact on affected systems.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-21405 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options