CVE-2023-21410 - Unauthenticated Remote Command Execution in AXIS License Plate Verifier's api.cgi
TL;DR:
A critical vulnerability (CVE-2023-21410) in AXIS License Plate Verifier lets attackers run system commands remotely via the “api.cgi” endpoint. The root cause