CVE-2021-31989

MEDIUM 5.3CVE-2021-31989 · Published 25/08/2021 · updated 17/06/2026

In short

CVE-2021-31989 is a MEDIUM (CVSS 5.3) vulnerability affecting device manager (axis).
Chance of exploitation in the next 30 days (EPSS): 0.40%, higher than 33.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
device manager axis	`≥ 5.00.010, ≤ 5.16.063`	No fix yet

Description

A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices.

References

axis.com/files/tech_notes/CVE-2021-31989.pdf · Vendor Advisory

More vulnerabilities in device manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free