Memory Dump Vulnerability in AXIS Device Manager
CVE-2021-31989

5.3MEDIUM

Key Information:

Vendor

Axis Communications Ab

Status
Axis Device Manager
Vendor
CVE Published:
25 August 2021

What is CVE-2021-31989?

A vulnerability exists in the AXIS Device Manager, allowing users with login permissions to extract a memory dump from the Windows Task Manager. This memory dump could potentially contain sensitive credentials for connected Axis devices, posing a serious security risk for users and organizations relying on these devices for surveillance and management.

Affected Version(s)

AXIS Device Manager From Axis Device Manager 5.00.010

References

https://www.axis.com/files/tech_notes/CVE-2021-31989.pdf
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2021-31989 : Memory Dump Vulnerability in AXIS Device Manager