VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Mar 19, 2024· Updated Jun 17, 2026

CVE-2024-0055

CVE-2024-0055

Description

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

Affected products

5
  • Axis/AXIS OS3 versions
    cpe:2.3:o:axis:axis_os:*:*:*:*:active:*:*:*+ 2 more
    • cpe:2.3:o:axis:axis_os:*:*:*:*:active:*:*:*range: >=10.12.0,<11.9.53
    • (no CPE)
    • (no CPE)range: AXIS OS 10.12 - 11.8
  • Axis/Axis OS 2022
    cpe:2.3:o:axis:axis_os_2022:*:*:*:*:lts:*:*:*
    Range: <10.12.228
  • Axis/VAPIX APIllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.