9.4
CVE-2025-0324
- EPSS 0.35%
- Veröffentlicht 02.06.2025 07:32:56
- Zuletzt bearbeitet 15.01.2026 15:42:33
- Quelle product-security@axis.com
- CVE-Watchlists
- Unerledigt
The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Axis ≫ Axis Os 2024 SwEditionlts Version >= 11.8.0 < 11.11.140
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.35% | 0.573 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| product-security@axis.com | 9.4 | 3.9 | 5.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
|
CWE-791 Incomplete Filtering of Special Elements
The product receives data from an upstream component, but does not completely filter special elements before sending it to a downstream component.