VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 19, 2024· Updated Nov 8, 2024

CVE-2024-0055

CVE-2024-0055

Description

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

Affected products

2
  • Axis/Axis OSllm-fuzzy
  • Axis Communications AB/AXIS OSv5
    Range: AXIS OS 10.12 - 11.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.