Описание
Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files causing a boot loop by redirecting a file deletion when recording video. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
EPSS
5.9 Medium
CVSS3
7.3 High
CVSS3
Дефекты
Связанные уязвимости
Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files causing a boot loop by redirecting a file deletion when recording video. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
Уязвимость программного обеспечения для управления видео AXIS Camera Station Pro, связанная с неправильным присвоением разрешений для критичного ресурса, позволяющая нарушителю получить доступ на удаление произвольных файлов и вызвать отказ в обслуживании
EPSS
5.9 Medium
CVSS3
7.3 High
CVSS3