Vulnerabilities > Axis > Axis OS 2022 > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-11-21 CVE-2023-21416 Unspecified vulnerability in Axis OS
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable to a Denial-of-Service attack allowing for an attacker to block access to the overlay configuration page in the web interface of the Axis device.
network
low complexity
axis
6.5
2023-11-21 CVE-2023-5553 Unspecified vulnerability in Axis OS and Axis OS 2022
During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection.
low complexity
axis
6.8