Path Traversal Vulnerability in Axis Communications' VAPIX API

CVE-2023-21415

What is CVE-2023-21415?

A security vulnerability has been identified in the VAPIX API's overlay_del.cgi within AXIS OS. This flaw allows authenticated users with operator or administrator privileges to execute a path traversal attack, leading to potential file deletion. It is vital for users to update their AXIS OS installations to the latest patched version to mitigate any security risks associated with this vulnerability. For further details and remediation steps, please refer to the Axis security advisory.

References