Axis Communications AXIS OS Improper Validation of Specified Type of Input (CVE-2024-47261)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505528);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/07/01");

  script_cve_id("CVE-2024-47261");

  script_name(english:"Axis Communications AXIS OS Improper Validation of Specified Type of Input (CVE-2024-47261)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"A researcher in the AXIS OS Bug Bounty Program has found that the
VAPIX API uploadoverlayimage.cgi did not have sufficient input
validation to allow an attacker to upload files to block access to
create image overlays in the web interface of the Axis device. Axis
has released patched AXIS OS versions for this flaw.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://www.axis.com/dam/public/18/c5/b2/cve-2024-47261pdf-en-US-474505.pdf
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?129af5d6");
  script_set_attribute(attribute:"solution", value:
"Upgrade AXIS OS according to the vendor advisory (fixed in 12.3.56 on
the active track and 11.11.141 on the 2024 LTS track, among other
tracks).");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2024-47261");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(1287);

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/04/08");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/04/08");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/06/30");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:axis:axis_os_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/AxisCommunication");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/AxisCommunication');

var asset = tenable_ot::assets::get(vendor:'AxisCommunication');

var vuln_cpes = {
    "cpe:/o:axis:axis_os_firmware:12" :
        {"versionStartIncluding" : "12.0", "versionEndExcluding" : "12.3.56", "family" : "AxisCommunication"},
    "cpe:/o:axis:axis_os_firmware:11" :
        {"versionStartIncluding" : "11.0", "versionEndExcluding" : "11.11.141", "family" : "AxisCommunication"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);