Beveiligingsadvies

CVE-2025-0358

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-02 07:39:50
Laatst bijgewerkt 2025-06-02 12:59:42
Toegewezen door Axis
CVSS-score 8.8
Status PUBLISHED

Beschrijving

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.