Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
References
| Link | Resource |
|---|---|
| https://www.axis.com/dam/public/c4/00/c5/cve-2024-0055-en-US-432117.pdf | Vendor Advisory |
| https://www.axis.com/dam/public/c4/00/c5/cve-2024-0055-en-US-432117.pdf | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
13 Jan 2026, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.axis.com/dam/public/c4/00/c5/cve-2024-0055-en-US-432117.pdf - Vendor Advisory | |
| First Time |
Axis axis Os
Axis Axis axis Os 2022 |
|
| CPE | cpe:2.3:o:axis:axis_os:*:*:*:*:active:*:*:* cpe:2.3:o:axis:axis_os_2022:*:*:*:*:lts:*:*:* |
21 Nov 2024, 08:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.axis.com/dam/public/c4/00/c5/cve-2024-0055-en-US-432117.pdf - |
08 Nov 2024, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-155 | |
| Summary | (en) Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. |
19 Mar 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-19 07:15
Updated : 2026-01-13 15:15
NVD link : CVE-2024-0055
Mitre link : CVE-2024-0055
CVE.ORG link : CVE-2024-0055
JSON object : View
Products Affected
axis
- axis_os
- axis_os_2022
CWE
CWE-155
Improper Neutralization of Wildcards or Matching Symbols