Approved changes feed: RSS · Atom

cpe:2.3:o:axis:a1001_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorAxis (70b79958-9d75-5ad6-90bd-d85cad17d4e7)
ProductA1001 Firmware (dcbe9dbd-47d3-5838-8b2f-2395567f7ccf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-21406 vulnerable 2026-06-08 05:54:18.516968 Heap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication
HIGH (7.1)
Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. By appending invalid data to an OSDP message it was possible to write data beyond the heap allocated buffer. The data written outside the buffer could be used to execute arbitrary code.  lease refer to the Axis security advisory for more information, mitigation and affected products and software versions.
Published: 2023-07-25T07:38:13.757Z
Updated: 2024-11-08T08:38:11.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-21405 vulnerable 2026-06-08 05:54:18.509247 Denial-of-Service vulnerability in Axis Network Door Controller's and Axis Network Intercom's OSDP communication
MEDIUM (6.5)
Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities meaning that doors cannot be opened or closed. No sensitive or customer data can be extracted as the Axis device is not further compromised. Please refer to the Axis security advisory for more information, mitigation and affected products and software versions.
Published: 2023-07-25T07:34:36.652Z
Updated: 2024-11-08T08:37:04.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10664 vulnerable 2026-06-08 05:10:36.144453 Details available
An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption.
Published: 2018-06-26T18:00:00.000Z
Updated: 2024-08-05T07:46:46.161Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10663 vulnerable 2026-06-08 05:10:36.097271 Details available
An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation.
Published: 2018-06-26T18:00:00.000Z
Updated: 2024-08-05T07:46:47.420Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10662 vulnerable 2026-06-08 05:10:36.022978 Details available
An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.
Published: 2018-06-26T18:00:00.000Z
Updated: 2024-08-05T07:46:46.211Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10661 vulnerable 2026-06-08 05:10:35.973580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10660 vulnerable 2026-06-08 05:10:35.929543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10659 vulnerable 2026-06-08 05:10:35.883041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10658 vulnerable 2026-06-08 05:10:35.312465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.