{"id":"CVE-2023-21414","aliases":["EUVD-2023-25582","GHSA-q9v9-cm52-vqj5"],"status":"published","title":"NCC Group has found a flaw during the annual internal penetration test ordered by Axis...","description":"NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering (commonly known as Secure Boot) contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.0026,"percentile":0.17915,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121"],"published":"2023-10-16T06:18:06Z","modified":"2026-06-17T05:32:32Z","products":[{"vendor":"axis","product":"a8207-ve_mk_ii"},{"vendor":"axis","product":"axis_os"},{"vendor":"axis","product":"q3527-lve"},{"vendor":"axis communications ab","product":"axis a8207-ve mk ii"},{"vendor":"axis communications ab","product":"axis os"},{"vendor":"axis communications ab","product":"axis q3527-lve"}],"references":[{"url":"https://www.axis.com/dam/public/45/3c/a1/cve-2023-21414pdf-en-US-412758.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21414"},{"url":"https://github.com/advisories/GHSA-q9v9-cm52-vqj5"}],"sources":{"cve":[{"id":"CVE-2023-21414","description":"NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering (commonly known as Secure Boot) contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.","status":"published","published":"2023-10-16T06:18:06.428Z","modified":"2024-11-08T08:32:47.057Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:35:20.812737Z"}],"euvd":[{"id":"EUVD-2023-25582","description":"NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering (commonly known as Secure Boot) contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.","status":"published","published":"2023-10-16T06:18:06Z","modified":"2024-11-08T08:32:47Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:05:06.878478Z"}],"ghsa":[{"id":"GHSA-q9v9-cm52-vqj5","title":"NCC Group has found a flaw during the annual internal penetration test ordered by Axis...","description":"NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering (commonly known as Secure Boot) contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.","status":"published","published":"2023-10-16T09:30:18Z","modified":"2024-11-08T09:31:32Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:58:46.386141Z"}],"nvd":[{"id":"CVE-2023-21414","description":"NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering (commonly known as Secure Boot) contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.","status":"published","published":"2023-10-16T07:15:08.68Z","modified":"2026-06-17T05:32:32.753Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:08:37.83429Z"}]}}