CVE-2023-21410CWE-78

Non-sanitized user input could lead to arbitrary code execution in AXIS License Plate Verifier

High · published August 3, 2023

CVSS v3.1
7.2
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for

arbitrary code execution.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00826 · 57.1th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2023-08-03T06:51Z
EPSS history
Timeline
  • 03 AUG 06:51Z
    Non-sanitized user input could lead to arbitrary code execution in AXIS License Plate Verifier
    cvelistv5