Axis Three Medium Vulnerabilities Disclosed

By Ethan Ace, Published Oct 06, 2021, 11:03am EDT (Info+)

Three medium-severity vulnerabilities have been discovered in Axis firmware by a cybersecurity researcher, affecting 300+ models.

IPVM Image

Inside this report:

  • A summary of the vulnerabilities and their severity
  • Explanation of privileges required to exploit
  • Devices and firmware versions impacted
  • Feedback from Axis on the vulnerabilities and Nozomi's research
  • How these vulnerabilities and Axis' response compare to Dahua and Hikvision

Three ***************/****** ****** ******

************* ********** **************** ***** ******** *************** ** **** firmware, *** ******** ****** ** *** "******" *****. *** ** ***** *************** ***** allow ** ****** ** ****** ********* code, *********** ************ *** ******/***, ******** attacks ******* ***** ******* ** *** network, ** ****** ********* **.

***** **** **** ** ***** ******** of ***** *************** *** ** ***** of ******* ** *********.

Axis *********

**** ******** * ******** ****** ** their************* ********** ******* ** **** ***. **** further ********* ** ** **** ******'* description ** ***** *************** *** ******** and **** **** ******* ******** ****** firmware *** **** ******* (********* *****).

******’* *********** ** ***** ***** ** accurate. ** **** ****** ******* ******** with ****** *** ******** **** **** their ******* ******** ****’* ******* ** the **** ********* ******** **** **** tested *** ******** *** **** **-******* devices. *** ********** ** **** ***** flaws ***’* **** *** *********** ****, and *** *** **** ******** *********** about *** ******** ******* ** **** security ********. ** **** ****, ******* are ******* *********.

Requires ************* **********

***** *** ***** ** ***** *************** may ***** *** ****** ** ** compromised ** ********, ********** *** ** these *************** ******** ************* **********, *.*., a **** **** ** ****** **** an **** ****** ** ****.

** ** ******** *** ********* ** exploit ***** *************** ******** ** ********** a **** ** ***** * ******** URL, ****** *** **** **** ** actively ****** **** *** *** ** of ** **** ******.

******* ***** *************** ******* ************* ********** or ******** ** ************* ** *******, they *** **** ******** **** ***** which ******* ** ************** ** *******, e.g.,****** **************** ***************.

All **** ******* ********

******'* ******* ********** ** ***** *************** was ********* **** ** ****' ***-************ Companion ***, *** **** ********* ** their ********** ** ** **** **** are ******* ** *** **** *******.

***** *************** ****** ******* ** *** Active ******** ***** (**.*) ** **** as ****-**** ******* ******, ***** ******** many ******* **** **** **** ************ (**** ********* ******* *** * ***** after ***).

**** **** **, *** **** *********, that ******* ******** *** **** ******* is ******* ********* *** ***** ******:

  • **** ** ****** ***** **.*
  • **** ** **** *** ***** *.**.*.*
  • **** ** **** *** ***** *.**.*.*
  • **** ** **** *** ***** *.**.*.*

******** ** ********* ******' ********* *** ** ********, **********, *** updated ** **** ********* ****** *******.

Nozomi ******** ********

****** ******** ** * ************************ ******** ****, ***** *** ********** other ************ ******** ***************, ********* ************* *** **** *************,***** *** ***************, ********** *** ***************.

****** ********* **** ** "***********" ********** the *******,******** ** ***** ****.

*** ****, *********** ****** ** *** Axis ********* ******* ****** ******** **** to ********** *** ******** *** ******** these *************** ***********.

Axis ********* ** "***********"/******** ***** ******** ****** **********

** ******** ** *** **** ************* respond ** ************* ***********, **** ******* Nozomi *** ******* ***** ********* ** them:

** ***** ****** ******** *** ***** research *** **** ************* ********** *** disclosure *******. **** ************** ******** *********** to ******* *** ******* *** ******** as ** ** *** ****** **** long-term *********** ***** ******** ** ******* through ************* *** ************.

**** *** **** ***** ** ***** updated ******** ***** ******* ***** ***************, including ******** *** **** ************ *******, with **** ******** ** *** **** Nozomi ******** ********* ***** **********.

Contrast ** *****/*********

****' ******** ** ****** *** *** speed *** ******* **** ***** **** released ******** ******* ** ******* ***** issues ** * ***** ******** ** recent *************** ********* ** ***** *** Hikvision *******.

** *** **** *******'* ****** ******** ***************, ***** *** ************ ** *** researcher, ******, ***** **** ********* ******** on *** ***************. **** ***** **********, it ******* ******* ** *** ******* have **** *******, *** **** **********, which **** *** ****.

******** ****************** *********** ********* ** **** ********** **** reporting ***** ******"******* ***** ** ********" *************. *******, ** *** *** *********** clear ***** ***** ****** ****** ******* firmware ** ***** ******** **** ******* for ***** *******, ****** ***** ** detail ** *** ************** ****** ********** ********** ********* *******.

Comments (25)

Shannon Davis

IPVMU Certified | 10/06/21 05:21pm

***** ******* *****!

Agree: 3
Disagree
Informative
Unhelpful
Funny

bashis mcw

10/07/21 12:22am

**** *****, *** * ***** **** Axis *** **** ** **** ****, they *** ***** **** ** **** on ******** *************** **** ** ** well.

* ****** **** **** ******** "******, find ******** ******, ** **** ** know *** *** **", *** * think ****'* *** ** *** ****** why **** ***'* *******/**** ***** ********'* and **** ***** ****** *** **** SSH ****** **** **** ***** (*** not **** ****** "*********" ***** ** many ****** **). ** **, ** shows ***** ********** ** ***** ********.

**** **** *'** **** ** **** now, ****** ** ******* **** *** :)

Agree: 3
Disagree
Informative: 10
Unhelpful
Funny

Robert Shih

Independent
10/07/21 03:35am

**** ** **** ***** ***** ****:

"*** **** ***************! *** **** ***************! You *** **** ***************!"

Agree
Disagree
Informative
Unhelpful
Funny: 8

John Honovich

IPVM | In reply to Robert Shih | 10/07/21 11:45am

* ** ******* *** ******* ** say "**** *** * *************** *** Hikvision **** *** * ** *** past *****, ** **** ***** ********* is ***** ***** **** ****** **** Axis."

***** ***** **** ** ************* ** the ******** ** ***************.

Agree: 10
Disagree
Informative
Unhelpful
Funny: 12

Robert Shih

Independent
In reply to John Honovich | 10/07/21 04:14pm

**'* ****** **** ***** *** ************ of ******* ********* *** *** ********** of *** ********* ** ***** ******** that ****** ** *** **** ***** of * ******* ** ***** ********.

** ******* *** *******, ********** ****** that *** ***** *** ****** ** copyright/patent ************ (**** ** **** **** you *** ******** *** ***** *** output "***** *****" ***********) *** *** account *** *** ***** ** ******* for *** ****. **** ** **** utilize ****** **** ****** ****, *****'* a ***** ********* *** ** ******** and ***** ********** **** ****.

Agree
Disagree
Informative
Unhelpful
Funny

Undisclosed #2

IPVMU Certified | In reply to Robert Shih | 10/07/21 11:03pm

** ******* *** *******, ********** ****** that *** ***** *** ****** ** copyright/patent ************ (**** ** **** **** you *** ******** *** ***** *** output "***** *****" ***********)…

**** *** *** **** ******* ***** here? **** ********** ****** ***** ********* or?

Agree: 3
Disagree
Informative
Unhelpful
Funny

Robert Shih

Independent
In reply to Undisclosed #2 | 10/08/21 06:07pm

******* *****'* * *** * **** that's ******* ***********, ** **** ** you **** ** *** ******* **** that's ******* ******* *******, ** ***** already ** *********** ******* *** ******* it.

*** ***** **** **** *** ****** of **** ******** **** ** **** sections, *** ** ***** ***** *** have ** ** ** ** ******** different *** ******* ******* ******* *********** the **** ****** ********* ******* *** that ***** ** *********** *** *** to ***. **** ****** *** ** reinvent *** ***** *** ** ** a ********* ***, ******* * **** vulnerable ***, ****** *** **** ** pay ********* ** *** ****** *** wrote *** ***** ****.

Agree
Disagree: 1
Informative
Unhelpful
Funny

Undisclosed #2

IPVMU Certified | In reply to Robert Shih | 10/08/21 06:17pm

******* *****'* * *** * **** that's ******* ***********, ** **** ** you **** ** *** ******* **** that's ******* ******* *******, ** ***** already ** *********** ******* *** ******* it.

*** ***** *** ** ** ********** of ******* ****’* *********** **** ******* knowing **?

Agree: 1
Disagree
Informative
Unhelpful
Funny

Undisclosed Integrator #3

In reply to Undisclosed #2 | 10/08/21 08:35pm

*****. **** ****** **** **** * patent ******* **** * ********* ******* to **. ********* ** **** ** the ***** ** **********. ** ***** be **** ** *************** ******* * copyright ** ******* ****.

**** ** **** **** *** *** reinvent *** ***** *** ****** "***** World" ***********

** *****'* *** *** ** ** it, *****'* *** *** ** ** it... *** *******'* *** ***** ** think *****'* ********** ** ********* ****** print("Hello *****!") ** ****** *****, *** any ****** ***** ***** **** *******'* either.

**** ********* ********** ** *** ****** world ******** **** ** ** **** people **************** ***/****/***/***/***/** ** ********** ** provide *********** *** **** **** ***** Overflow (***'* ** ******, ********* ****** from ***** ********).

******* *** **** ** *** *****. You ***'* **** ** **** ********'* source **** ** **** ***** ****. And *** ***** *** **** **** mistakes ** *** ****. ** * recall, ******** ***** ** ****** ****** lists ****. *** *** ***** *** into **** **** ** ******* ** matter **** *********** *** **.

**** ******* ** ****** ******, ******, a *** ** ** ** ******** best *********, ********** ********** ** ***-****** organizations **** *****. **** ****, ***** is **** ** *** ** **********, publishes ***************. ** ***'** ********* ***** open-source **********, *** *******'* **** ** worry ***** ******* ** ****** **********. There's * *** ** ***** ****** following **** ** ****, *** ** you *** **** ** ****** ** easy ** *** ****. (** *** want ** ****** *** ******** ******** and *** *********'* ***** ********** *********™, then *** *** **** ** *** a ******* **** *********.)

** ******, **** ***** ****** ****.

Agree
Disagree
Informative
Unhelpful
Funny

Robert Shih

Independent
In reply to Undisclosed #2 | 10/08/21 10:25pm

*********** *** **** **** ******* *********. There's **** ******** ** ***** **** song *** **********. *** *** ********* end ** ******* ********* ******* ** someone ****'* **** ******* **** **** having **** ** *********** **** **** and ** *** **** *** ***** back ** ****** *** *** ***** you ** ******* ** **** ***** your *** **** ********.

* ***** *** **** ***** ********* also *******, *** ***** *** ******** issues ***** *********** *** **** ******* as ****.

Agree
Disagree: 1
Informative: 1
Unhelpful
Funny

Undisclosed #2

IPVMU Certified | In reply to Robert Shih | 10/09/21 02:23am

*** ***** **** **** *** ****** of **** ******** **** ** **** sections, *** ** ***** ***** *** have ** ** ** ** ******** different *** ******* ******* ******* *********** the **** ****** ********* ******* *** that ***** ** *********** *** *** to ***. **** ****** *** ** reinvent *** ***** *** ** ** a ********* ***, ******* * **** vulnerable ***, ****** *** **** ** pay ********* ** *** ****** *** wrote *** ***** ****.

***** ***, *********** ****** ******* **** is *** ** * **** ********* or ***********, ** ** * ********* matter, ***** ** ** ********** *** someone ** **** **** * *****.

******, ***** **** ***** ** ******* source **** ***********, ********* ** ********* to ******* ******* ***** *** ********* cannot ** ***********, **** ****************** ** *** ****, *** **** only ** ***** *** ***** **** to ***** ******* *** **** *********.

** *****, *’* ****** ********* **** when ********** * ** *********** * begins ** ***** **** ********* **** scratch ** *****’* ***** **** * copyright ******.

*** *** ******* *** ***** ** software ********* ********** **** ***’* ******* literal ****** **** ******* ** ********* element *******?

Agree: 1
Disagree
Informative
Unhelpful
Funny

Robert Shih

Independent
In reply to Undisclosed #2 | 10/09/21 05:32am

* *** ******* *** ***** **** the ****** **** *** ****** ****** software ** ****** **** ********* *** review ** **** * *** **** songs *** **.

*******, ***** *** ***** ***** *** situations **** **** **** ********* **** varying ********. ** *** ***** ** Google **. ****** ** * ***** example, *** *** *** ***** **** the **** *** ******** ******. ************ speaking, * *** **** *** ** the ******** ** *** ********* ****.

******** *** *** ***: ********* ** the ****** - ********* - **** University - ******

*********, **** ** *** **** ** minimal, ** *** ***** ** *** taken ** ***** **** *** ** said *** ****. *** **** ***** stifles ****** ** **** ***** ** there *** ********* ***** *** **** to ******** *** ***** *** ** reason ***** **** ** ***** ****** accusations ** ****** ****

Agree
Disagree: 1
Informative
Unhelpful
Funny

Undisclosed #2

IPVMU Certified | In reply to Robert Shih | 10/09/21 07:26am

*********, **** ** *** **** ** minimal, ** *** ***** ** *** taken ** ***** **** *** ** said *** ****.

*** *** **** *** **** ****** aware ** **** ********** *** ***********? As ** *******, ****** * ********* a ** ****** **** *’* ***** to *********** ********** ** * ****** ****?

* *** ***** ** ********.

Agree: 1
Disagree
Informative
Unhelpful
Funny

Robert Shih

Independent
In reply to Undisclosed #2 | 10/10/21 10:10pm

** ****** ****** ** **** ****** trolls ***** *** **** **** ** all **** *********. ***** **** ****, I *** **** ***** ** *****.

* **** *** ******** ** *** current ***** ********* **** **** *** AV1 ***** ** * ********* ******** to *.***/****, ***** *** ***** ** be **** ****** *** *******-****. *******, it *** **** ********* **** ** such ****** ******. **'* *** ******* microcosm ** *** ** ***'* **** nice ******.

Agree
Disagree: 1
Informative
Unhelpful
Funny

Undisclosed Manufacturer #1

10/07/21 07:23pm

*** ** ********* **** *** *** average **** *** **** ** *** the *************** ****** *********/*****?

** ***** *** **** **** ****/**** has ** **** *** *** **** comparable?

Agree
Disagree
Informative
Unhelpful
Funny

Undisclosed End User #4

In reply to Undisclosed Manufacturer #1 | 10/08/21 09:00am

***** ** *** ********* ************* ********** ************* *** ***** ** *** for "*****" ****** **********. *** ***** 9/22, ******* *** **** **** ** reproduce **** ** */**.

Agree
Disagree
Informative
Unhelpful
Funny

Undisclosed #2

IPVMU Certified | 10/07/21 10:59pm

***** *** ***** ** ***** *************** may ***** *** ****** ** ** compromised ** ********, ********** *** ** these *************** ******** ************* **********, *.*., a **** **** ** ****** **** an **** ****** ** ****.

*** ** ***** *** ****** **** CAN’T ** *********** ** ******* ** logged ** ** ****?

Agree: 2
Disagree
Informative: 1
Unhelpful
Funny: 1

bashis mcw

In reply to Undisclosed #2 | 10/07/21 11:22pm

**, * ***** **** ***, **'* like ****** ****;

****@***:/****/***# ** - ****

****@***:~#

***** ** ** *************** *******, ** I *** *** *** *** ******** question.

*****, **** ***** *** ***************, *** useful, * ***'* ****.

Agree: 1
Disagree
Informative
Unhelpful
Funny

Undisclosed #2

IPVMU Certified | In reply to bashis mcw | 10/08/21 12:14am

*****, **** ***** *** ***************, *** useful, * ***'* ****.

*** ****** ****** - ** *** first **** ** ** ****** ****:

*******, *** **** ******** ******** ****** to ****** (** ******** ** *** official ******* *************) **** ** **** than “****” ********** **** “*****” ****** of ***** *** ****** ** *** libcurl *********** ******.

*** ***** ** ** *** *****. In ** **********, **** ******* *** have * ****** ******** **** *** mean ** *** ** *********.

***** *** **** ******* ********* ******* uid=0 *** ******* * ***?

Agree
Disagree
Informative
Unhelpful
Funny

bashis mcw

In reply to Undisclosed #2 | 10/08/21 12:25am

**** (***=*) ** ****, ** *******/*** actually ******.

******, * ******* ** *** **** based ******** (*** *** ***** ***** buffer ********), *** ********** ** ************.

[****]

*** ***** ** ** *** *****. In ** **********, **** ******* *** have * ****** ******** **** *** mean ** *** ** *********.

****, **** **** *** *** **** heap ** ***** ***** ********, *** in ******* *** ***'* ** ****.

Agree: 1
Disagree
Informative
Unhelpful
Funny

Undisclosed Integrator #3

In reply to Undisclosed #2 | 10/08/21 12:30am

* ************* ** * ************* **** if *** ***'* *********** ********* **. Just ******* ** ***'* * * or * **** ***** *****'* **** it's *** ***** ****** *********. ********* it ***** * ***** ** *************** being **** ** ********** **** ** form * ********* *******. ***** ** Axis *** ***** ** ********! * just **** * ******* ***** ******* which * **** *** **** **** security ** *********...

Agree: 5
Disagree
Informative
Unhelpful
Funny

bashis mcw

In reply to Undisclosed Integrator #3 | 10/08/21 12:32am

**** ** **** ****, ******** *************** is *** **** ***** **** *** also **** *********.

Agree: 1
Disagree
Informative
Unhelpful
Funny

Undisclosed #2

IPVMU Certified | In reply to Undisclosed Integrator #3 | 10/08/21 02:38am

* ************* ** * ************* **** if *** ***'* *********** ********* **. Just ******* ** ***'* * * or * **** ***** *****'* **** it's *** ***** ****** *********.

* *****, **’* ** ***** *** Axis ** **** *** ***** **. If **** *****’* ***** ** **, they ***** *** *** **** ** some ***-***** ******** ** ***** ** could ** ********* ** * ******* user. *** **** ** **** **** you ***** **** **** ****** *** an ****** *******.

**** ** * *** *** **** the ****** ***** *****, ***** **’* just * ****-**** ****-***-***.

* ***** *** *’* ********* ** is *** ****** *** *******, * feel ** ******** *** ***** ********* vulnerabilities *** *****.

Agree
Disagree
Informative
Unhelpful
Funny
Avatar

Ethan Ace

IPVM | In reply to Undisclosed #2 | 10/08/21 02:49am

* ***** *** *’* ********* ** is *** ****** *** *******, * feel ** ******** *** ***** ********* vulnerabilities *** *****.

** ** ****, ***** *** *** levels ***** ****** (**** *** ********), so **'* *** **** *** ** the *****, *** * *.* ** just ***** *** **** *****.

*** ********** **** ******* ***** **** an **** ****** **** ** * browser, ****** ** ** ****, *** then ***** * ******** **** ** exploit **** **** ******* *** ******* is ****** ***, *** **'* *** 0, *** *** ********* ****** ** very ****, ** ******* ** ****** enough.

*** * ** *****, **'* *** a *.*.

Agree
Disagree
Informative
Unhelpful
Funny

Undisclosed #2

IPVMU Certified | In reply to Ethan Ace | 10/08/21 03:30am

…******* ***** **** ** **** ****** open ** * *******, ****** ** as ****, *** **** ***** * phishing **** ** ******* **** **** outside *** ******* ** ****** ***

****** ***** **** **** ***** ******** in **** ****. *** ******** **** could **** ****** *** **** ******** and ****** ***. ** *** ***** config ***** * ********.

Agree
Disagree
Informative
Unhelpful
Funny
Login to read this IPVM report.
Why do I need to log in?
IPVM conducts reporting, tutorials and software funded by subscriber's payments enabling us to offer the most independent, accurate and in-depth information.
Loading Related Reports