Remote code execution vulnerability during the installation of ACAP applications on the Axis device

CVE-2023-21413

What is CVE-2023-21413?

A serious vulnerability in AXIS OS has been identified, which allows for remote code execution during the installation of ACAP applications on Axis devices. This issue arises from inadequate input validation within the application handling service, permitting malicious actors to execute arbitrary commands on the affected systems. Axis has acknowledged this security flaw and issued updated versions of AXIS OS to mitigate the risks. Users are strongly advised to upgrade their systems to the latest versions and consult the Axis security advisory for further details and recommended actions.

References