Audit Log Tampering and DoS Vulnerability in AXIS Camera Station

CVE-2024-7696

Summary

A vulnerability has been identified in AXIS Camera Station, where an authenticated attacker can manipulate audit log creation. This could lead not only to the alteration of important audit logs but also to the potential execution of Denial-of-Service attacks on the server. By crafting malicious audit log entries, the attacker can disrupt the normal functioning of the AXIS Camera Station server. Axis Communications has already released a patch to mitigate this issue. For further details, please consult the Axis security advisory linked below.

References