Summary
Ein entfernter authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Axis Axis OS ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen und erhöhte Rechte zu erlangen.
Product
Axis OS ist ein Linux-basiertes Betriebssystem, das in Netzwerkvideoprodukten von Axis Communications verwendet wird.
Vulnerabilities 5
-
High 8.5
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the ACAP Appl…
-
High 7.8
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Dev…
-
Medium 6.5
51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did not have a sufficient…
-
Medium 5.3
Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to …
-
Low 3.5
Girishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi did not have a…
Revision history
-
#1
Initiale Fassung
References
-
Axis Security Advisory vom 2025-03-05
https://www.axis.com/dam/public/13/cd/4a/cve-2024-47259pdf-en-US-466882.pdf
-
Axis Security Advisory vom 2025-03-05
https://www.axis.com/dam/public/1d/d3/ef/cve-2024-47260pdf-en-US-466883.pdf
-
Axis Security Advisory vom 2025-03-05
https://www.axis.com/dam/public/68/08/c5/cve-2025-0359pdf-en-US-466885.pdf
-
Axis Security Advisory vom 2025-03-05
https://www.axis.com/dam/public/a3/18/6e/cve-2024-47262pdf-en-US-466884.pdf
-
Axis Security Advisory vom 2025-03-05
https://www.axis.com/dam/public/b1/fe/46/cve-2025-0360pdf-en-US-466887.pdf