CVE-2024-6476

published 2024-11-26

CVE-2024-6476: Gee-netics, member of the AXIS Camera Station Pro Bug Bounty Program has found that it is possible for a non-admin user to gain system privileges by…

Priority P4 17 medium 4.2 CVSS 3.1

AV L AC H PR L UI N S C C N I L A L

Gee-netics, member of the AXIS Camera Station Pro Bug Bounty Program has found that it is possible for a non-admin user to gain system privileges by redirecting a file deletion upon service restart.
Axis has released patched versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
axis_communications_ab	axis_camera_station	—	—
axis_communications_ab	axis_camera_station_pro	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-276