CVE-2023-21409

Mô tả

Tham khảo

• axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf · Vendor Advisory

Lỗ hổng khác của license plate verifier

• CVE-2023-21412CAO 8.8User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections.
• CVE-2023-21411CAO 8.8User provided input is not sanitized in the “Settings > Access Control” configuration interface allowing for arbitrary code execution.
• CVE-2023-21410CAO 8.8User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code execution.
• CVE-2023-21408NGHIÊM TRỌNG 9.8 Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration…
• CVE-2023-21407CAO 8.8 A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges.