CVE-2025-0324

The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.

Score

CVSS 3.1 9.4 Critical

Status

Analyzed - product-security@axis.com

Published

2025-06-02

Last modified

2025-06-02

Weaknesses

CWE-791

Affected products

• Axis Os (Axis)
• Axis Os 2024 (Axis)
• Axis Os (Axis Communications Ab)

References

• https://www.axis.com/dam/public/04/f3/1c/cve-2025-0324pdf-en-US-483807.pdf