CVE-2025-0324
HIGH 8.8EPSS 0.4%
The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.
- Affected
- Axis Communications AB · AXIS OS
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 AXIS
- 9.4 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - EPSS
- 0.41% chance of exploitation in the next 30 days, 33rd percentile
- Published
- 2025-06-02
Proof-of-concept exploits (1)
- kemrec/CVE-2025-0324-axis-vapix-privesc0★ · 2026-09-01