CVE-2023-21404

Summary

AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code. The static RSA key is not used in any other secure communication nor can it be used to compromise the device or any customer data.

Affected Software

Weaknesses

• CWE-321: CWE-321: Use of Hard-coded Cryptographic Key

ADP Enrichment

CVE Program Container

Additional References

• https://www.axis.com/dam/public/07/0a/20/cve-2023-21404-en-US-398426.pdf

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.axis.com/dam/public/07/0a/20/cve-2023-21404-en-US-398426.pdf

• ←Previous
• Next→