CVE-2024-47261

4.3 mediumEPSS 0.4%

Medium (4.3) in axis. EPSS 0.4% chance of exploitation in the next 30 days.

51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload files to block access to create image overlays in the web interface of the Axis device.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-1287
Published: 2025-04-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

axis:axis_os
axis:axis_os_2022
axis:axis_os_2024

References

https://www.axis.com/dam/public/18/c5/b2/cve-2024-47261pdf-en-US-474505.pdf

Check your stack JSON