Vulnerability Database

308,377

Total vulnerabilities in the database

CVE-2021-31989

A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices.

  • Published: Aug 25, 2021
  • Updated: Nov 16, 2025
  • CVE: CVE-2021-31989
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:P/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
axis / device_manager 5.00.010 5.16.063.x