Axis os 2020

This hub aggregates every CVE we track for Axis os 2020, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 7 most recently published vulnerabilities affecting Axis os 2020.

• CVE-2023-5800Insufficient input validation in VAPIX API create_overlay.cgi5.4Feb 5, 2024
• CVE-2023-21418Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion. This flaw can only be expl...7.1Nov 21, 2023
• CVE-2023-21417Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversal attacks that allows for file/folder deletion. This flaw...7.1Nov 21, 2023
• CVE-2023-21415Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exp...6.5Oct 16, 2023
• CVE-2021-31988A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and include arbitrary...8.8Oct 5, 2021
• CVE-2021-31987A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients.7.5Oct 5, 2021
• CVE-2021-31986User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage.6.8Oct 5, 2021