CVE-2024-7696

Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamper with audit log creation in AXIS Camera Station, or perform a Denial-of-Service attack on the AXIS Camera Station server using maliciously crafted audit log entries. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

CVSS v3 6.3 MEDIUM

6.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.1 / Impact : 4.2

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.axis.com/dam/public/b3/53/03/cve-2024-7696-en-US-459552.pdf	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:axis:camera_station_pro:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2025-01-07 06:15

Updated : 2025-10-10 14:27

NVD link : CVE-2024-7696

Mitre link : CVE-2024-7696

CVE.ORG link : CVE-2024-7696

JSON object : View

Products Affected

axis

camera_station_pro

CWE

CWE-117

Improper Output Neutralization for Logs

{"id": "CVE-2024-7696", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 2.1}]}, "published": "2025-01-07T06:15:17.827", "references": [{"url": "https://www.axis.com/dam/public/b3/53/03/cve-2024-7696-en-US-459552.pdf", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-117"}]}], "descriptions": [{"lang": "en", "value": "Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamper with audit log creation in AXIS Camera Station, or perform a Denial-of-Service attack on the AXIS Camera Station server using maliciously crafted audit log entries. \nAxis has released a patched version for the highlighted flaw. Please \nrefer to the Axis security advisory for more information and solution."}, {"lang": "es", "value": "Seth Fogie, miembro del programa Bug Bounty de AXIS Camera Station Pro, ha descubierto que es posible que un cliente malintencionado autenticado altere la creaci\u00f3n de registros de auditor\u00eda en AXIS Camera Station o realice un ataque de denegaci\u00f3n de servicio en el servidor de AXIS Camera Station utilizando entradas de registros de auditor\u00eda creadas con fines malintencionados. Axis ha publicado una versi\u00f3n parcheada para la falla resaltada. Consulte el aviso de seguridad de Axis para obtener m\u00e1s informaci\u00f3n y soluciones."}], "lastModified": "2025-10-10T14:27:04.757", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:axis:camera_station_pro:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37F6F691-C97D-43B9-80DD-4BC656F90177", "versionEndExcluding": "6.5.35848"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}