CVE-2024-7696 Other in AXIS Camera Station Pro
Authenticated attackers can tamper with audit logs or cause denial of service in AXIS Camera Station Pro via crafted log entries.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-7696?
CVE-2024-7696 is a medium-severity vulnerability in AXIS Camera Station Pro, published on 7 Jan 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamper with audit log creation in AXIS Camera Station, or perform a Denial-of-Service attack on the AXIS Camera Station server using maliciously crafted audit log entries. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
Weakness: CWE-117
Which versions are affected by CVE-2024-7696?
It affects 1 product.
Products include Axis Camera Station Pro.
How do I fix CVE-2024-7696?
No fix has been published for CVE-2024-7696 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-7696 being exploited?
There is no known exploitation of CVE-2024-7696 in the wild and no public exploit code.
Other vulnerabilities in AXIS Camera Station Pro
Sources
Also known as GHSA-8q9f-gmmq-64wc.