CVE-2024-7784

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection. To Axis' knowledge, there are no known exploits of the vulnerability at this time. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-121

Affected software

Vendor	Product	Versions
Axis Communications AB	AXIS OS	>= 10.9.0, < 10.12.246; >= 11.0.0, < 11.11.80; >= 12.0.0, < 12.0.40
Axis Communications AB	AXIS OS	>= 11.11.0, < 11.11.80; >= 12.0.0, < 12.0.47
Axis Communications AB	AXIS OS	>= 10.10.0, < 10.12.247; >= 11.0.0, < 11.11.85; >= 12.0.0, < 12.0.47
Axis Communications AB	AXIS OS	>= 11.8.0, < 11.11.85; >= 12.0.0, < 12.0.47
axis	axis_os	>= 10.9, < 11.11; >= 10.10, < 11.11; >= 11.8, < 11.11
axis	axis_os	11.11

References

https://www.axis.com/dam/public/ba/5f/4e/cve-2024-7784-en-US-448998.pdf

Timeline

Published: Sep 10, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-77859.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ece Software Electronic Ticket CVE-2024-77865.3The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to lea CVE-2024-77875.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ITG Computer Technology vSRM Su CVE-2024-77887.8Improper Digital Signature Invalidation vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vu CVE-2024-77905.4A stored cross site scripting vulnerabilities exists in DevikaAI from commit 6acce21fb08c3d1123ef05df6a33912bf0ee77c2 onwards via improperly CVE-2024-77915.4The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘arrow’ parame CVE-2024-77928.8A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been classified as critical. Affected is an unknown function o CVE-2024-77935.4A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been declared as problematic. Affected by this vulnerability i CVE-2024-77949.8A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been rated as critical. Affected by this issue is some unkno CVE-2024-77958.8Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vul CVE-2024-77979.8A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. Affected is an unknown fun CVE-2024-77989.8A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been declared as critical. Affected by this vulnerabili