CVE-2023-21405

mediumPriorität · verfolgen · 26EPSS 0.003 · 22. PerzentilEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.30% (22nd) EPSS

CVSS 6.5 · medium

Is it mine?

26 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · bewertet 2026-10-27

Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities meaning that doors cannot be opened or closed. No sensitive or customer data can be extracted as the Axis device is not further compromised. Please refer to the Axis security advisory for more information, mitigation and affected products and software versions.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.16.5mediumAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · product-security@axis.comAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.16mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-1286USCWE-404USCWE-754US

betroffene Produkte (26)

Betroffene Produkte und Versionsbereiche.

Axis Communications AB AXIS A1001 Network Door Controller≤ AXIS OS 1.65.4 or earlierenisa_euvdEU
Axis Communications AB AXIS A1210-B Network Door Controller≤ AXIS OS 11.0 - 11.6.16.0enisa_euvdEU
Axis Communications AB AXIS A1601 Network Door Controller≤ AXIS OS 11.0 - 11.6.16.0enisa_euvdEU
Axis Communications AB AXIS A1601 Network Door Controller≤ AXIS OS 10.12.171.0 or earlierenisa_euvdEU
Axis Communications AB AXIS A1601 Network Door Controller≤ AXIS OS 1.84.4 or earlierenisa_euvdEU
Axis Communications AB AXIS A1610 (-B) Network Door Controller≤ AXIS OS 11.0 - 11.6.16.0enisa_euvdEU
Axis Communications AB AXIS A1610 (-B) Network Door Controller≤ AXIS OS 10.12.171.0 or earlierenisa_euvdEU
Axis Communications AB AXIS A8207-VE Mk II Network Video Door Station≤ AXIS OS AXIS OS 11.0 - 11.5.53enisa_euvdEU
Axis Communications AB AXIS A8207-VE Mk II Network Video Door Station≤ AXIS OS 10.12.178 or earlierenisa_euvdEU
Axis Communications AB AXIS A8207-VE Network Video Door Station≤ AXIS OS AXIS OS 11.0 - 11.5.53enisa_euvdEU
Axis Communications AB AXIS A8207-VE Network Video Door Station≤ AXIS OS 10.12.178 or earlierenisa_euvdEU
Axis Communications AXIS OS≤ 10.12.171.0fstec_bduRU
Axis Communications AXIS OS≤ 10.12.178fstec_bduRU
Axis Communications AXIS OS≤ 1.84.4fstec_bduRU
Axis Communications AXIS OS≤ 1.65.4fstec_bduRU
Axis Communications AXIS OS11.0 → 11.6.16.0fstec_bduRU
Axis Communications AXIS OS11.0 → 11.5.53fstec_bduRU
axis a1001 firmware≤ 1.65.4nvdUScpe:2.3:o:axis:a1001_firmware:*:*:*:*:*:*:*:*
axis a1210 (-b) firmware11.0 → 11.6.16.0nvdUScpe:2.3:o:axis:a1210_\(-b\)_firmware:*:*:*:*:*:*:*:*
axis a1601 firmware≤ 1.84.4nvdUScpe:2.3:o:axis:a1601_firmware:*:*:*:*:*:*:*:*

20 von 26 angezeigt

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

veröffentlicht 2023-07-25geändert 2026-06-17

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan