PT-2025-9628 · Axis · Axis

Publicado 2025-03-04 · Atualizado 2025-03-05 · CVE-2024-47262

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Axis device versions (affected versions not specified)

Description A race condition attack was discovered in the VAPIX API param.cgi endpoint, allowing an attacker to block access to the web interface of the Axis device. Other API endpoints or services not using param.cgi are not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-1287

Identificadores relacionados

CVE-2024-47262

Produtos afetados

Axis

Referências · 5

• https://t.me/cvenotify/113321 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1897133323161379306 · Publicação no Twitter
• https://t.me/cvedetector/19468 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2024-47262 · Nota de Segurança
• https://axis.com/dam/public/a3/18/6e/cve-2024-47262pdf-en-US-466884.pdf · Nota