CVE-2023-21407

Privilege escalation in AXIS License Plate Verifier ACAP

State
Published
Severity
8.8 High
Published
Aug 3, 2023
Updated
Oct 17, 2024
Reserved
Nov 4, 2022

Read the record on cve.org

Description

A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HAxis

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
AXIS License Plate VerifierAxis Communications AB
  • 2.8.3 or earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.