CVE-2021-31989: Axis Device Manager

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices.

Affected products

• Axis Device Manager: from 5.00.010, up to and including 5.16.063

Published 2021-08-25. Last modified 2026-06-17.