Remote Code Execution Vulnerability in AXIS OS Create_Overlay.cgi

CVE-2023-5800

What is CVE-2023-5800?

A security vulnerability has been identified in the VAPIX API create_overlay.cgi within various versions of AXIS OS. This flaw stems from inadequate input validation, which could allow an authenticated user with operator or administrator privileges to execute arbitrary code remotely. Axis Communications has acknowledged this issue and has provided patched versions of AXIS OS to address the vulnerability. For detailed remediation steps and guidance, users should refer to the Axis security advisory.

References