CVE-2023-21404CWE-321

AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code

Medium · published May 8, 2023

CVSS v3.1
4.1
EPSS
0%
Percentile
19.7
In the wild
Unconfirmed
What it is

AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code. The static RSA key is not used in any other secure communication nor can it be used to compromise the device or any customer data.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00283 · 19.7th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2023-05-08T00:00Z
EPSS history
Timeline
  • 08 MAY 00:00Z
    AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code
    cvelistv5