CVE-2024-0055 MEDIUM

CVE-2024-0055

Vendor Axis Communications Ab

Product AXIS OS

Weakness CWE-155

Published March 19, 2024

Last update November 8, 2024

View on NVD All CVEs

CVSS base score

6.5/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

Key dates

02Disclosure timeline

March 19, 2024 CVE published

November 8, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-0055 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/155.html

Related vulnerabilities

04Related CVE

CVE-2024-8688 PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI) CVE-2024-47791 Ruijie Reyee OS Improper Neutralization of Wildcards or Matching Symbols CVE-2025-4232 GlobalProtect: Authenticated Code Injection Through Wildcard on macOS CVE-2025-0681 New Rock Technologies Cloud Connected Devices Improper Neutralization of Wildcards or Matching Symbols CVE-2026-49482 ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle Overwrite