Vulnerabilities > CVE-2021-31986 - Out-of-bounds Write vulnerability in Axis products

047910
CVSS 4.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
PARTIAL
network
high complexity
axis
CWE-787

Summary

User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage.

Common Weakness Enumeration (CWE)