CVE-2024-47257CWE-1284

Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lead to the Axis device becoming…

High · published November 26, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
43.0
In the wild
Unconfirmed
What it is

Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lead to the Axis device becoming unavailable in the network.

Axis has released patched AXIS OS versions for the highlighted flaw for products that are still under AXIS OS software support. Please refer to the Axis security advisory for more information and solution.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00515 · 43.0th percentile
Weakness
CWE-1284 · Improper Validation of Specified Quantity in Input
Published
2024-11-26T07:21Z
EPSS history
Timeline
  • 26 NOV 07:21Z
    Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lead to the Axis device becoming…
    cvelistv5