← All advisories

Critical severity9.4NVD Advisory· Published Jun 2, 2025· Updated Jun 17, 2026

CVE-2025-0324

CVE-2025-0324

Description

The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.

Affected products

4

Axis/AXIS OS2 versions
cpe:2.3:o:axis:axis_os:*:*:*:*:active:*:*:*+ 1 more
- cpe:2.3:o:axis:axis_os:*:*:*:*:active:*:*:*range: >=12.0.0,<12.3.33
- (no CPE)range: 11.8.0
Axis/Axis OS 2024
cpe:2.3:o:axis:axis_os_2024:*:*:*:*:lts:*:*:*
Range: >=11.8.0,<11.11.140
Axis/VAPIX Device Configuration frameworkllm-fuzzy

Patches

Vulnerability mechanics

References

1

www.axis.com/dam/public/04/f3/1c/cve-2025-0324pdf-en-US-483807.pdfnvdVendor Advisory

News mentions

0

No linked articles in our index yet.