CVE-2024-7696CWE-117

Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamper with audit log…

Medium · published January 7, 2025

CVSS v3.1
6.3
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamper with audit log creation in AXIS Camera Station, or perform a Denial-of-Service attack on the AXIS Camera Station server using maliciously crafted audit log entries.

Axis has released a patched version for the highlighted flaw. Please

refer to the Axis security advisory for more information and solution.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.7th percentile
Weakness
CWE-117 · Improper Output Neutralization for Logs
Published
2025-01-07T05:38Z
EPSS history
Timeline
  • 07 JAN 05:38Z
    Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamper with audit log…
    cvelistv5