PT-2024-37653 · Axis · Axis Camera Station Pro

Published 2024-11-26 · Updated 2024-11-26 · CVE-2024-6476

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions AXIS Camera Station Pro (affected versions not specified)

Description A non-admin user can gain system privileges by redirecting a file deletion upon service restart. The issue was discovered by Gee-netics, a member of the AXIS Camera Station Pro Bug Bounty Program.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2024-6476

Affected Products

Axis Camera Station Pro

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-6476 · Security Note
• https://axis.com/dam/public/e5/24/82/cve-2024-6476pdf-en-US-455104.pdf · Note
• https://twitter.com/CVEnew/status/1861311857929105744 · Twitter Post