User-Controlled Parameter Validation Flaw in Axis Products
CVE-2021-31987

7.5HIGH

Key Information:

Vendor

Axis Communications Ab

Status
Axis Os
Vendor
CVE Published:
5 October 2021

What is CVE-2021-31987?

An identified vulnerability arises from insufficient validation of a user-controlled parameter linked to the SMTP test functionality in Axis products. This flaw enables unauthorized users to bypass restrictions on blocked network recipients, potentially leading to unauthorized information disclosure or exploitation of the system. Proper measures and updates are recommended to safeguard against this security risk.

Affected Version(s)

AXIS OS AXIS OS 5.51 or later

References

https://www.axis.com/files/tech_notes/CVE-2021-31987.pdf
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.