We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload files to block access to create image overlays in the web interface of the Axis device.
Reserved 2024-09-23 | Published 2025-04-08 | Updated 2025-04-08 | Assigner AxisCWE-1287: Improper Validation of Specified Type of Input
www.axis.com/.../18/c5/b2/cve-2024-47261pdf-en-US-474505.pdf
Support options