CVE-2024-0055

6.5 mediumEPSS 0.6%

Medium (6.5) in axis. EPSS 0.6% chance of exploitation in the next 30 days.

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-155
Published: 2024-03-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

axis:axis_os
axis:axis_os_2022

References

https://www.axis.com/dam/public/c4/00/c5/cve-2024-0055-en-US-432117.pdf
https://www.axis.com/dam/public/c4/00/c5/cve-2024-0055-en-US-432117.pdf

Check your stack JSON