NuytsTech Security

CVE-2024-0055

by ·

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

Date published : 2024-03-19

https://www.axis.com/dam/public/c4/00/c5/cve-2024-0055-en-US-432117.pdf

Tags: