Privilege escalation in AXIS License Plate Verifier ACAP

CVE-2023-21407

What is CVE-2023-21407?

A vulnerability was identified that allows for broken access control, enabling an attacker to escalate privileges from an operator account to an administrator account in Axis Communications products. This weakness could lead to unauthorized access and control over critical functionalities within the affected systems, raising significant security concerns for users and organizations relying on these devices.

References