CVE-2023-21410

Description

References

• axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf · Vendor Advisory

More vulnerabilities in license plate verifier

• CVE-2023-21412HIGH 8.8User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections.
• CVE-2023-21411HIGH 8.8User provided input is not sanitized in the “Settings > Access Control” configuration interface allowing for arbitrary code execution.
• CVE-2023-21409CRITICAL 9.8 Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configurat…
• CVE-2023-21408CRITICAL 9.8 Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration…
• CVE-2023-21407HIGH 8.8 A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges.