VAPIX API Vulnerability in Axis Devices

CVE-2024-47260

What is CVE-2024-47260?

An issue was identified in the VAPIX API on Axis devices, where insufficient input validation allowed users to upload more audio clips than the system was designed to handle. This flaw can lead to excessive memory usage, potentially resulting in device performance issues. Axis has addressed this vulnerability with an update, providing patched versions of AXIS OS to mitigate the risk. Users are encouraged to review the Axis security advisory for detailed information on the update.

References