CVE-2023-21405 - CVE House
Back to Database
Status published Medium CVE-2023-21405

Denial-of-Service vulnerability in Axis Network Door Controller's and Axis Network Intercom's OSDP communication

Vulnerability Description

Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities meaning that doors cannot be opened or closed. No sensitive or customer data can be extracted as the Axis device is not further compromised. Please refer to the Axis security advisory for more information, mitigation and affected products and software versions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-21405

Credits & Attribution

No credits recorded in the NVD database.

References

More from Axis Communications AB

View All →
CVE-2025-9524
The VAPIX API port.cgi did not have sufficient input validation,...
Medium 4.3
CVE-2025-9055
The VAPIX Edge storage API that allowed a privilege escalation,...
Medium 6.4
CVE-2025-8998
It was possible to upload files with a specific name...
Low 3.1
CVE-2025-8108
An ACAP configuration file has improper permissions and lacks input...
Medium 6.7
CVE-2025-7622
During an internal security assessment, a Server-Side Request Forgery (SSRF)...
Medium 5.1

Affected Vendor

Axis Communications AB

View all reports →

Affected Software

AXIS A1001 Network Door Controller, AXIS A1210-B Network Door Controller, AXIS A1601 Network Door Controller, AXIS A1610 (-B) Network Door Controller, AXIS A8207-VE Network Video Door Station, AXIS A8207-VE Mk II Network Video Door Station
Vulnerable Versions:
AXIS OS 1.65.4 or earlier, AXIS OS 11.0 - 11.6.16.0, AXIS OS 1.84.4 or earlier, AXIS OS 10.12.171.0 or earlier, AXIS OS 10.12.178 or earlier, AXIS OS AXIS OS 11.0 - 11.5.53

Timeline

Official Publish: July 25th, 2023
Last Modified: November 8th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-1286

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.