Security Advisory
CVE-2025-0361
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for unauthenticated username enumeration through the VAPIX Device Configuration SSH Management API.