PT-2022-19267 · Axis · Axis M1125

Published 2022-07-21 · Updated 2023-08-08 · CVE-2022-28860

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citilog version 8.0

Description An authentication downgrade in the server allows an attacker, in a man-in-the-middle position between the server and its smart camera Axis M1125, to achieve HTTP access to the camera.

Recommendations For Citilog version 8.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-28860

Affected Products

Axis M1125

References · 7

• https://osv.dev/vulnerability/CVE-2022-28860 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28860 · Security Note
• https://citilog.com/wp-content/uploads/2023/07/CitilogSAS_information_note_2021-10-18-English.pdf · Note
• https://t.me/cvenotify/55385 · Telegram Post
• ❌ https://github.com/ErwanBroquaire/citilog-8.0-vulnerability · Note, Deleted
• https://t.me/cibsecurity/46758 · Telegram Post
• https://citilog.com · Note