CVE-2023-21414highCWE-121

CVE-2023-21414: high-severity vulnerability in AXIS OS

Published · Updated

Follow this CVE+ Monitor AXIS OS+ Monitor AXIS A8207-VE Mk II

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.3%
NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering (commonly known as Secure Boot) contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Axis Communications AB · AXIS A8207-VE Mk IIAxis Communications AB · AXIS OSAxis Communications AB · AXIS Q3527-LVE
Related CVEs — AXIS OS

In the same product, most dangerous first.

CVE-2023-21413CRITICALRemote code execution vulnerability during the installation of ACAP applications on the Axis deviceEPSS 1.5%CVE-2025-6779MEDIUMCVE-2025-6779EPSS 1.0%CVE-2021-31988—CVE-2021-31988EPSS 1.0%CVE-2021-31987—CVE-2021-31987EPSS 0.9%CVE-2021-31986—CVE-2021-31986EPSS 0.8%CVE-2023-21415MEDIUMCVE-2023-21415EPSS 0.7%