CVE-2024-7696

Katalog CVE

CVSS 6.3 · Medium EPSS 0,23%

Kerentanan Improper Output Neutralization for Logs pada axis camera station pro. Skor CVSS 3.1 6.3 (Medium) menurut axis.com.

Deskripsi (NVD)

Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamper with audit log creation in AXIS Camera Station, or perform a Denial-of-Service attack on the AXIS Camera Station server using maliciously crafted audit log entries. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

Rincian

Terbit di NVD

7 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.3 (Medium), sumber axis.com
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-117: Improper Output Neutralization for Logs

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.axis.com/dam/public/b3/53/03/cve-2024-7696-en-US-459552.pdf advisory vendor