CVE-2024-7784
During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly…
- Published
- Updated
- Reserved
- Assigned by
- Axis
Description
During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection. To Axis' knowledge, there are no known exploits of the vulnerability at this time. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| AxisCNA (assigner) | 3.1 | Medium6.1 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| NVDNVD · Deferred | 3.1 | Medium6.1 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
- EPSS (exploitation in 30 days)
- 0.24% · top 85% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.1.
Weakness
Affected products
Axis Communications AB · AXIS OS
- affected 10.9.0 – < 10.12.246
- affected 11.0.0 – < 11.11.80
- affected 12.0.0 – < 12.0.40
Axis Communications AB · AXIS OS
- affected 11.11.0 – < 11.11.80
- affected 12.0.0 – < 12.0.47
Axis Communications AB · AXIS OS
- affected 10.10.0 – < 10.12.247
- affected 11.0.0 – < 11.11.85
- affected 12.0.0 – < 12.0.47
Axis Communications AB · AXIS OS
- affected 11.8.0 – < 11.11.85
- affected 12.0.0 – < 12.0.47
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2024-7784)Record last updated .