CVE-2023-21410: Non-sanitized user input could lead to arbitrary code execution in AXIS License Plate Verifier
Published Aug 3, 2023
·Updated
User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code execution.
Affected Software
1 affected component
Axis License Plate Verifier<=2.8.3
Event History
Aug 3, 2023
CVE Published
via MITRE·06:51 AM
Data Sourced
via MITRE·06:51 AM
DescriptionSeverityWeakness
Data Sourced
07:15 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-21410.
2
What is the severity of CVE-2023-21410?
The severity of CVE-2023-21410 is high, with a severity value of 8.8.
3
Which software is affected by CVE-2023-21410?
The AXIS License Plate Verifier software up to version 2.8.3 is affected by CVE-2023-21410.
4
What is the risk posed by CVE-2023-21410?
CVE-2023-21410 poses a risk of arbitrary code execution due to unsanitized user input on the AXIS License Plate Verifier specific 'api.cgi'.
5
Is there a fix available for CVE-2023-21410?
It is recommended to update the AXIS License Plate Verifier software to a version that includes a fix for CVE-2023-21410.