CVE-2023-5553 Security feature bypass in AXIS OS

High 7.6 Published 21 Nov 2023 Updated 10 Jun 2025

Attackers can bypass Secure Boot protection on Axis network cameras, potentially allowing unauthorized code execution or device tampering.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-5553?

CVE-2023-5553 is a high-severity vulnerability in AXIS OS, published on 21 Nov 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection. To Axis' knowledge, there are no known exploits of the vulnerability at this time. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

Weakness: CWE-863

Which versions are affected by CVE-2023-5553?

It affects 2 products.

Products include Axis Axis Os, Axis Axis Os 2022.

How do I fix CVE-2023-5553?

No fix has been published for CVE-2023-5553 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-5553 being exploited?

There is no known exploitation of CVE-2023-5553 in the wild and no public exploit code.

Sources

Also known as GHSA-v5cr-hwcx-r95m.