CVE-2024-7784

State: Published
Severity: 6.1 Medium
Published: Sep 10, 2024
Updated: Mar 28, 2025
Reserved: Aug 14, 2024

Description

During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection. To Axis' knowledge, there are no known exploits of the vulnerability at this time. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

Scores

CVSS	Score	Vector	Source
3.1	6.1 Medium	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	Axis

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
AXIS OSAxis Communications AB	10.9.0 to before 10.12.246Affected 11.0.0 to before 11.11.80Affected 12.0.0 to before 12.0.40Affected
AXIS OSAxis Communications AB	11.11.0 to before 11.11.80Affected 12.0.0 to before 12.0.47Affected
AXIS OSAxis Communications AB	10.10.0 to before 10.12.247Affected 11.0.0 to before 11.11.85Affected 12.0.0 to before 12.0.47Affected
AXIS OSAxis Communications AB	11.8.0 to before 11.11.85Affected 12.0.0 to before 12.0.47Affected

References

https://www.axis.com/dam/public/ba/5f/4e/cve-2024-7784-en-US-448998.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.