CVE-2024-0066: Medium severity axis os vulnerability
Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may expose sensitive traffic between the client (Axis device) and (O3C) server. If O3C is not being used this flaw does not apply. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0066?
CVE-2024-0066 has a medium severity rating as it may expose sensitive traffic if O3C is enabled.
How do I fix CVE-2024-0066?
To fix CVE-2024-0066, upgrade to the patched versions of AXIS OS released by Axis.
What devices are affected by CVE-2024-0066?
CVE-2024-0066 affects Axis devices that use the O3C feature in AXIS OS.
Is there a workaround for CVE-2024-0066?
If you are not using the O3C feature, there is no impact from CVE-2024-0066.
Who discovered CVE-2024-0066?
CVE-2024-0066 was discovered by Johan Fagerström as part of the AXIS OS Bug Bounty Program.