Denial-of-Service Vulnerability in Axis VAPIX API

CVE-2023-21416

What is CVE-2023-21416?

A Denial-of-Service vulnerability exists in the VAPIX API of Axis devices, specifically within the dynamic overlay configuration module. This flaw can be exploited by an authenticated attacker with operator or administrator permissions to interrupt access to critical configuration pages in the device's web interface. Axis has issued patched versions of AXIS OS to mitigate this vulnerability. For further details and remediation, please consult the Axis security advisory.

References