CVE-2023-21408

概要

参考情報

• axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf · Vendor Advisory

license plate verifier のその他の脆弱性

• CVE-2023-21412高 8.8User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections.
• CVE-2023-21411高 8.8User provided input is not sanitized in the “Settings > Access Control” configuration interface allowing for arbitrary code execution.
• CVE-2023-21410高 8.8User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code execution.
• CVE-2023-21409緊急 9.8 Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configurat…
• CVE-2023-21407高 8.8 A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges.