Brandon Rothel from QED Secure Solutions and Sam Hanson of Dragos have found that the VAPIX API tcptest.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticating with an operator- or administ...
Product
axis p1214-e firmware vulnerabilities
8 published CVES affecting axis p1214-e firmware, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 8
- Critical
- 3
- High
- 5
- Medium
- 0
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest axis p1214-e firmware CVEs
Newest publication first
-
HighCVSS 8.8 EPSS 0.56%
-
HighCVSS 7.5 EPSS 1.5%
An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption.
-
HighCVSS 7.5 EPSS 1.4%
An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation.
-
HighCVSS 7.5 EPSS 1.8%
There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction.
-
HighCVSS 7.5 EPSS 1.5%
There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code inside libdbus-send.so shared object or similar.
-
CriticalCVSS 9.8 EPSS 81.8% Framework module Public exploit
An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.
-
CriticalCVSS 9.8 EPSS 86.0% Framework module Public exploit
An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
-
CriticalCVSS 9.8 EPSS 78.9% Framework module Public exploit
An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.