Axis Communications AXIS OS Improper Validation of Specified Type of Input (CVE-2024-47262)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505529);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/06/30");

  script_cve_id("CVE-2024-47262");

  script_name(english:"Axis Communications AXIS OS Improper Validation of Specified Type of Input (CVE-2024-47262)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has
found that the VAPIX API param.cgi was vulnerable to a race condition
attack allowing for an attacker to block access to the web interface
of the Axis device. Axis has released patched AXIS OS versions for
this flaw. Endpoints not using param.cgi are not affected.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://www.axis.com/dam/public/a3/18/6e/cve-2024-47262pdf-en-US-466884.pdf
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?93ae1fa5");
  script_set_attribute(attribute:"solution", value:
"Upgrade AXIS OS according to the vendor advisory (fixed in 12.3.4 on
the active track and 11.11.127 on the 2024 LTS track, among other
tracks).");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2024-47262");

  script_cwe_id(1287);

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/03/04");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/03/04");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/06/30");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:axis:axis_os_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/AxisCommunication");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/AxisCommunication');

var asset = tenable_ot::assets::get(vendor:'AxisCommunication');

var vuln_cpes = {
    "cpe:/o:axis:axis_os_firmware:12" :
        {"versionStartIncluding" : "12.0", "versionEndExcluding" : "12.3.4", "family" : "AxisCommunication"},
    "cpe:/o:axis:axis_os_firmware:11" :
        {"versionStartIncluding" : "11.0", "versionEndExcluding" : "11.11.127", "family" : "AxisCommunication"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);