CVE-2021-31987

HIGH

SMTP Test Functionality <unknown> - Auth Bypass

Title source: llm

Description

A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients.

References (1)

Scores

CVSS v3 7.5
EPSS 0.0011
EPSS Percentile 28.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-1286
Status published

Affected Products (4)

axis/axis_os < 10.8
axis/axis_os_2016 < 6.50.5.5
axis/axis_os_2018 < 8.40.4.3
axis/axis_os_2020 < 9.80.3.5

Timeline

Published Oct 05, 2021
Tracked Since Feb 18, 2026