CVE-2023-21411: Non-sanitized user input could lead to arbitrary code execution during Access Control configuration in AXIS License Plate Verifier
Published Aug 3, 2023
·Updated
User provided input is not sanitized in the “Settings > Access Control” configuration interface allowing for arbitrary code execution.
Affected Software
1 affected component
Axis License Plate Verifier<=2.8.3
Event History
Aug 3, 2023
CVE Published
via MITRE·06:54 AM
Data Sourced
via MITRE·06:54 AM
DescriptionSeverityWeakness
Data Sourced
07:15 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-21411?
The severity of CVE-2023-21411 is rated as high with a score of 8.8.
2
What is the affected software for CVE-2023-21411?
The affected software for CVE-2023-21411 is AXIS License Plate Verifier version up to and including 2.8.3.
3
How does CVE-2023-21411 impact system security?
CVE-2023-21411 allows for arbitrary code execution, posing a significant risk to system security.
4
How can I fix CVE-2023-21411?
To fix CVE-2023-21411, it is recommended to apply the latest security patch or upgrade to a patched version of AXIS License Plate Verifier.
5
Where can I find more information about CVE-2023-21411?
More information about CVE-2023-21411 can be found at the following reference: [Axis Security Advisory](https://www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf).