Description
A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication layer.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Axis Communications AB | AXIS A1210 - Secure Entry | 11.7.12.2 – < 12.11.106.1 | 12.11.106.1 |
| Axis Communications AB | AXIS A1601 - Secure Entry | 11.1.10.1 – < 12.11.106.1 | 12.11.106.1 |
| Axis Communications AB | AXIS A1610 - Secure Entry | 11.4.32.2 – < 12.11.106.1 | 12.11.106.1 |
| Axis Communications AB | AXIS A1710 | 12.0.101.4 – < 12.11.106.1 | 12.11.106.1 |
| Axis Communications AB | AXIS A1810 - Secure Entry | 12.0.101.4 – < 12.11.106.1 | 12.11.106.1 |