CVE-2024-47257

Summary

Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lead to the Axis device becoming unavailable in the network. Axis has released patched AXIS OS versions for the highlighted flaw for products that are still under AXIS OS software support. Please refer to the Axis security advisory for more information and solution.

Affected Software

VendorProductVersion RangeStatus
Axis Communications ABAXIS Q6128-E PTZ Network Camera6.50affected
Axis Communications ABAXIS P1428-E Network Camera6.50affected

Weaknesses

  • CWE-1284: CWE-1284: Improper Validation of Specified Quantity in Input

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References