Product
4 published CVES affecting Axis Communications AB AXIS Device Manager, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation.
The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack.
The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack.
A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.