AXIS OS < 10.12.228, 11.x < 11.9.53 DoS Vulnerability

AXIS OS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:axis:axisos"; if...

CVE-2024-0055

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis...

AXIS OS Security Vulnerability

AXIS Os is an edge device operating system from AXIS of Sweden. A security vulnerability exists in AXIS OS versions 10.12 through 11.8, which stems from the vulnerability of the VAPIX APIs mediaclip.cgi and playclip.cgi to a file globbing attack that can lead to resource exhaustion...

CVE-2024-0055: Improper Neutralization of Wildcards or Matching Symbols

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis...