CVE-2025-0360

Publication date

2025-03-04 05:24:00

Family

Axis

State

PUBLISHED

Description

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect user privilege level in the VAPIX service account D-Bus API.