PT-2023-7525 · Axis Communications · Axis Os

Published 2023-11-21 · Updated 2024-11-08 · CVE-2023-5553

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AXIS OS (affected versions not specified)

Description A flaw was found in the protection for device tampering, commonly known as Secure Boot, in AXIS OS, making it vulnerable to a sophisticated attack to bypass this protection. There are no known exploits of the issue at this time. The vulnerability can be exploited by a remote attacker to bypass existing security restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Incorrect Authorization

Improper Access Control

Weakness Enumeration

CWE-693

CWE-863

CWE-284

Related Identifiers

BDU:2023-08579

CVE-2023-5553

Affected Products

Axis Os

References · 8

• https://bdu.fstec.ru/vul/2023-08579 · Security Note
• https://osv.dev/vulnerability/CVE-2023-5553 · Vendor Advisory
• https://axis.com/dam/public/0a/66/25/cve-2023-5553-en-US-417789.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-5553 · Security Note
• https://t.me/cvenotify/60930 · Telegram Post
• https://vuldb.com/ru/?id.245882 · Note
• https://t.me/cvenotify/60906 · Telegram Post
• https://t.me/cvenotify/92745 · Telegram Post