PT-2024-37891 · Axis · Axis Camera Station Pro

Published 2024-11-26 · Updated 2024-11-26 · CVE-2024-6831

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions AXIS Camera Station Pro (affected versions not specified)

Description The issue allows editing and/or removal of views without necessary permission due to a client-side-only check. Axis has released patched versions for the flaw.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-602

Related Identifiers

CVE-2024-6831

Affected Products

Axis Camera Station Pro

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-6831 · Security Note
• https://twitter.com/CVEnew/status/1861311855563571306 · Twitter Post
• https://axis.com/dam/public/a2/9a/41/cve-2024-6831-en-US-455107.pdf · Note