7.8
CVE-2025-0360
- EPSS 0.15%
- Veröffentlicht 04.03.2025 06:15:30
- Zuletzt bearbeitet 22.01.2026 20:59:43
- Quelle product-security@axis.com
- CVE-Watchlists
- Unerledigt
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect user privilege level in the VAPIX service account D-Bus API.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Axis ≫ Axis Os 2024 SwEditionlts Version < 11.11.135
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.355 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| product-security@axis.com | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-863 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.