CVE-2021-31989

5.3 mediumEPSS 0.4%

Medium (5.3) in axis device manager. EPSS 0.4% chance of exploitation in the next 30 days.

A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWEs: CWE-312, CWE-316
Published: 2021-08-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

axis:device_manager

References

https://www.axis.com/files/tech_notes/CVE-2021-31989.pdf
https://www.axis.com/files/tech_notes/CVE-2021-31989.pdf

Check your stack JSON