Описание
Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API alwaysmulti.cgi was vulnerable for file globbing which could lead to resource exhaustion of the Axis device. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
EPSS
Процентиль: 32%
0.00127
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-155
CWE-770
Связанные уязвимости
CVSS3: 6.5
github
больше 1 года назад
Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API alwaysmulti.cgi was vulnerable for file globbing which could lead to resource exhaustion of the Axis device. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
EPSS
Процентиль: 32%
0.00127
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-155
CWE-770