CVE-2024-7784 — MEDIUM (6.1)

Vulnerability Description

During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection. To Axis' knowledge, there are no known exploits of the vulnerability at this time. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

NONE

Related Weaknesses (CWE)

CWE-121

References

https://www.axis.com/dam/public/ba/5f/4e/cve-2024-7784-en-US-448998.pdf

FAQ

What is CVE-2024-7784?

CVE-2024-7784 is a vulnerability with a CVSS score of 6.1 (MEDIUM). During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making it vulnerable to a so...

How severe is CVE-2024-7784?

CVE-2024-7784 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-7784?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.