Back to Database
Status published
High
CVE-2021-31988
A user controlled parameter related to SMTP test functionality is...
Vulnerability Description
A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and include arbitrary SMTP headers in the generated test email.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-31988
Credits & Attribution
No credits recorded in the NVD database.
More from Axis Communications AB
View All →CVE-2025-9524
The VAPIX API port.cgi did not have sufficient input validation,...
Medium
4.3
CVE-2025-9055
The VAPIX Edge storage API that allowed a privilege escalation,...
Medium
6.4
CVE-2025-8998
It was possible to upload files with a specific name...
Low
3.1
CVE-2025-8108
An ACAP configuration file has improper permissions and lacks input...
Medium
6.7
CVE-2025-7622
During an internal security assessment, a Server-Side Request Forgery (SSRF)...
Medium
5.1
Affected Vendor
Axis Communications AB
View all reports →Affected Software
AXIS OS
Vulnerable Versions:
AXIS OS 5.51 or later
Timeline
Official Publish:
October 5th, 2021
Last Modified:
November 8th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.