Axis Communications AXIS OS Improper Restriction of Names for Files and Other Resources (CVE-2024-47260)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505532);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/07/01");

  script_cve_id("CVE-2024-47260");

  script_name(english:"Axis Communications AXIS OS Improper Restriction of Names for Files and Other Resources (CVE-2024-47260)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Lasse Trind, member of the AXIS OS Bug Bounty Program, has found that
the VAPIX API mediaclip.cgi did not have a sufficient input validation
allowing for uploading more audio clips then designed resulting in the
Axis device running out of memory. Axis has released patched AXIS OS
versions for this flaw.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://www.axis.com/dam/public/1d/d3/ef/cve-2024-47260pdf-en-US-466883.pdf
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?5302f7d4");
  script_set_attribute(attribute:"solution", value:
"Upgrade AXIS OS according to the vendor advisory (fixed in 12.3.1 on
the active track and 11.11.135 on the 2024 LTS track, among other
tracks).");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2024-47260");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(641);

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/03/04");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/03/04");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/06/30");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:axis:axis_os_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/AxisCommunication");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/AxisCommunication');

var asset = tenable_ot::assets::get(vendor:'AxisCommunication');

var vuln_cpes = {
    "cpe:/o:axis:axis_os_firmware:12" :
        {"versionStartIncluding" : "12.0", "versionEndExcluding" : "12.3.1", "family" : "AxisCommunication"},
    "cpe:/o:axis:axis_os_firmware:11" :
        {"versionStartIncluding" : "11.0", "versionEndExcluding" : "11.11.135", "family" : "AxisCommunication"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);