QwikSec

Security Database

CVE

CWE

Training

CVE-2021-31989

Published: Aug 25, 2021

Modified: Nov 8, 2024

PUBLISHED

Description

A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices.

Vendor	Product	Versions
Axis Communications AB	AXIS Device Manager	affected `From Axis Device Manager 5.00.010`

Weaknesses (CWE)

References

https://www.axis.com/files/tech_notes/CVE-2021-31989.pdf

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.