CVE-2024-6749

State: Published
Severity: 6.3 Medium
Published: Nov 26, 2024
Updated: Nov 26, 2024
Reserved: Jul 15, 2024

Description

Seth Fogie, member of the AXIS Camera Station Pro Bug Bounty Program, has found that the Incident report feature may expose sensitive credentials on the AXIS Camera Station windows client. If Incident report is not being used with credentials configured this flaw does not apply.

Axis has released patched versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

Scores

CVSS	Score	Vector	Source
3.1	6.3 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L	Axis

Weaknesses

CWE-522 Insufficiently Protected Credentials

Affected Products

Product	Versions
AXIS Camera Station ProAxis Communications AB	6.0 - 6.3Affected
AXIS Camera StationAxis Communications AB	5.25 - 5.57.27610Affected

References

https://www.axis.com/dam/public/e6/e8/1e/cve-2024-6749-en-US-455106.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.