CVE-2025-0324

CRITICAL 9.4EPSS 0.4%

The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.

CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 9.4 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
EPSS: 0.37% chance of exploitation in the next 30 days, 30th percentile
Published: 2025-06-02

Proof-of-concept exploits (1)

kemrec/CVE-2025-0324-axis-vapix-privesc

References

Related