CVE-2023-21406
published 2023-07-25CVE-2023-21406: Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod…
PriorityP349high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
EPSS
0.30%
22.5th percentile
Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when
communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which
is handling the OSDP communication allowing to write outside of the allocated buffer. By
appending invalid data to an OSDP message it was possible to write data beyond the heap
allocated buffer. The data written outside the buffer could be used to execute arbitrary code.
lease refer to the Axis security advisory for more information, mitigation and affected products and software versions.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| axis | a1001_firmware | <= 1.65.4 | — |
| axis_communications_ab | axis_a1001_network_door_controller | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-m2fp-c5wr-xjph: Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when
communicating over OSDP
ghsa_unreviewed·2023-07-25
CVE-2023-21406 [HIGH] CWE-120 GHSA-m2fp-c5wr-xjph: Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when
communicating over OSDP
Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when
communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which
is handling the OSDP communication allowing to write outside of the allocated buffer. By
appending invalid data to an OSDP message it was possible to write data beyond the heap
allocated buffer. The data written outside the buffer could be used to execute arbitrary code.
lease refer to the Axis security advisory for more information, mitigation and affected products and software versions.
CISA ICS
AXIS A1001
cisa_ics·2023-07-25·CVSS 7.1
[HIGH] AXIS A1001
ICS Advisory
##
AXIS A1001
Release DateJuly 25, 2023
Alert CodeICSA-23-206-01
## 1. EXECUTIVE SUMMARY
- CVSS v3 7.1
- ATTENTION: Exploitable from adjacent network
- Vendor: Axis Communications
- Equipment: AXIS A1001
- Vulnerability: Heap-based Buffer Overflow
## 2. RISK EVALUATION
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
The following versions of AXIS A1001, a network door controller, are affected:
- AXIS A1001: 1.65.4 and prior
## 3.2 VULNERABILITY OVERVIEW
3.2.1 HEAP-BASED BUFFER OVERFLOW CWE-122
A heap-based buffer overflow vulnerability exists in the AXIS 1001 versions 1.65.4 and prior. When communicating over the Open Supervised Device Proto
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-07-25
Published