Vendor
Axis Communications AB
100 known vulnerabilities.
Products
AXIS OS 61
AXIS Camera Station Pro 23
AXIS Camera Station 7
AXIS License Plate Verifier 6
AXIS Camera Station 5 4
AXIS Device Manager 4
Signed Video Framework 2
Signed media verifier 2
Axis File Player 2
AXIS A1001 Network Door Controller 2
AXIS A1601 - Secure Entry 1
AXIS A1810 - Secure Entry 1
AXIS A1710 1
AXIS A1610 - Secure Entry 1
AXIS A1210 - Secure Entry 1
AXIS IP Utility 1
AXIS Q6128-E PTZ Network Camera 1
AXIS P1428-E Network Camera 1
AXIS Optimizer 1
AXIS A1210-B Network Door Controller 1
AXIS A1601 Network Door Controller 1
AXIS A1610 (-B) Network Door Controller 1
AXIS A8207-VE Network Video Door Station 1
AXIS A8207-VE Mk II Network Video Door Station 1
AXIS A8207-VE Mk II 1
AXIS Q3527-LVE 1
AXIS A1001 0
59 results · Clear filters · Feed
-
Medium 6.5
It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permi…
-
Medium 5.3
The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the appl…
-
Medium 6.5
Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which coul…
-
Medium 6.7
The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalatio…
-
Medium 4.3
The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw can only …
-
Medium 6.7
A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized …
-
Medium 5.1
The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to pri…
-
Medium 5.7
An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerabi…
-
Medium 5.7
The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to pri…
-
Medium 5.3
The Signed Video Framework contained a buffer overflow issue which could lead the application using this framework to …
-
Medium 5.9
The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited afte…
-
Medium 5.4
A configuration file on the local file system had improper input validation which could allow code execution and potent…
-
Medium 6.7
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to pot…
-
Medium 6.0
An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead…
-
Medium 6.7
ACAP applications can gain elevated privileges due to improper input validation during the installation process, potent…
-
Medium 5.7
An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having th…
-
Medium 4.6
An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are …
-
Medium 4.5
A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script …
-
Medium 6.4
The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain …
-
Medium 4.3
The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usabili…
-
Medium 6.7
An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privile…
-
Medium 6.7
An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privil…
-
Medium 6.0
A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it.
-
Medium 6.6
A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applica…
-
Medium 6.7
ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escal…
-
Medium 6.8
The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only b…
-
Medium 6.4
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to pot…
-
Medium 6.7
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vul…
-
Medium 6.7
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vul…
-
Medium 6.7
ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerabi…
-
Medium 5.1
During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticate…
-
Medium 5.3
The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required.
-
Medium 4.8
The communication protocol used between the server process and the service control had a flaw that could lead to a loca…
-
Medium 6.8
The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the mi…
-
Medium 4.3
A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacke…
-
Medium 5.9
Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to…
-
Medium 6.1
Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the…
-
Medium 4.3
During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX De…
-
Medium 4.3
51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have s…
-
Medium 5.3
Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to …