NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering (commonly known as Secure Boot) contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
References
| Link | Resource |
|---|---|
| https://www.axis.com/dam/public/45/3c/a1/cve-2023-21414pdf-en-US-412758.pdf | Vendor Advisory |
| https://www.axis.com/dam/public/45/3c/a1/cve-2023-21414pdf-en-US-412758.pdf | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
No history.
Information
Published : 2023-10-16 07:15
Updated : 2024-11-21 07:42
NVD link : CVE-2023-21414
Mitre link : CVE-2023-21414
CVE.ORG link : CVE-2023-21414
JSON object : View
Products Affected
axis
- p3267-lv
- m3216
- m4327-p
- p3268-lv
- p3265-lv
- p3265-lve
- q3536-lve
- q1961-te
- p1468-le
- p3827-pve
- m3215
- a8207-ve_mk_ii
- xfq1656
- m4328-p
- p3268-lve
- p4705-plve
- q3538-lve
- q1656-b
- q1656-dle
- q1656
- axis_os
- q1656-ble
- q3628-ve
- m4318-plve
- q2101-te
- p3265-v
- q3527-lve
- q1656-le
- p1467-le
- p3267-lve
- p1468-xle
- p4707-plve
- q1656-be
- m4317-plve
- q3626-ve
CWE