CVE-2021-31989

State: Published
Severity: Not scored
Published: Aug 25, 2021
Updated: Nov 8, 2024
Reserved: Apr 30, 2021

Description

A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices.

Scores

The record has no CVSS score.

Weaknesses

CWE-316 Cleartext Storage of Sensitive Information in Memory

Affected Products

Product	Versions
AXIS Device ManagerAxis Communications AB	From Axis Device Manager 5.00.010Affected

References

https://www.axis.com/files/tech_notes/CVE-2021-31989.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.