CVE-2024-8160
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-8160
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files from/to the Axis device. This flaw can only be exploited after authenticating with an administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-1286
Source: NVD (National Vulnerability Database)
Vulnerability Title
AXIS OS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AXIS OS是瑞典安讯士（AXIS）公司的一种边缘设备操作系统。 AXIS OS 10.9版本至12.0版本存在安全漏洞，该漏洞源于没有足够的输入验证，可能导致命令注入。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Axis Communications AB | AXIS OS | 10.9.0 ~ 10.12.257 | - |
II. Public POCs for CVE-2024-8160
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-8160
请登录查看更多情报信息。
Same Patch Batch · Axis Communications AB · 2024-11-26 · 6 CVEs total
| CVE-2024-47257 | 7.5 HIGH | AXIS OS 安全漏洞 |
| CVE-2024-6749 | 6.3 MEDIUM | AXIS Camera Station Pro 安全漏洞 |
| CVE-2024-6831 | 4.4 MEDIUM | AXIS Camera Station Pro 安全漏洞 |
| CVE-2024-8772 | 4.3 MEDIUM | AXIS OS 安全漏洞 |
| CVE-2024-6476 | 4.2 MEDIUM | AXIS Camera Station Pro 安全漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-1286
- CVE-2026-6442
Improper Command Detection Logic Allows RCE in Cortex Code C - CVE-2026-40198
Net::CIDR::Lite versions before 0.23 for Perl does not valid - CVE-2026-33778
Junos OS: SRX Series, MX Series: When a specifically malform - CVE-2026-34835
Rack: `Rack::Request` accepts invalid Host characters, enabl - CVE-2026-20114
Cisco IOS XE Software 安全漏洞
V. Comments for CVE-2024-8160
No comments yet