Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities m
Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities meaning that doors cannot be opened or closed. No sensitive or customer data can be extracted as the Axis device is not…
| Vendor | Product | Versions |
|---|---|---|
| Axis Communications AB | AXIS A1001 Network Door Controller | AXIS OS 1.65.4 or earlier |
| Axis Communications AB | AXIS A1210 | B Network Door Controller — AXIS OS 11.0 - 11.6.16.0 |
| Axis Communications AB | AXIS A1601 Network Door Controller | AXIS OS 1.84.4 or earlier, AXIS OS 10.12.171.0 or earlier, AXIS OS 11.0 - 11.6.16.0 |
| Axis Communications AB | AXIS A1610 ( | B) Network Door Controller — AXIS OS 10.12.171.0 or earlier, AXIS OS 11.0 - 11.6.16.0 |
| Axis Communications AB | AXIS A8207 | VE Network Video Door Station — AXIS OS 10.12.178 or earlier, AXIS OS AXIS OS 11.0 - 11.5.53 |
| Axis Communications AB | AXIS A8207 | VE Mk II Network Video Door Station — AXIS OS 10.12.178 or earlier, AXIS OS AXIS OS 11.0 - 11.5.53 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.