CVE-2025-0324 describes a privilege escalation vulnerability within the VAPIX Device Configuration framework, impacting Axis OS and Axis OS 2024. This high-severity flaw (CVSS 8.8) allows a low-privileged user to gain administrator access, posing a significant risk of full system compromise. While no active exploitation, public exploit code, or significant community discussion has been observed, the vulnerability's high FAUCET Risk Score of 83/100 indicates its potential for severe impact if exploited.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 12.0.0, < 12.3.33CPE matchmatch criteria | cpe:2.3:o:axis:axis_os:*:*:*:*:active:*:*:* | ||
>= 11.8.0, < 11.11.140CPE matchmatch criteria | cpe:2.3:o:axis:axis_os_2024:*:*:*:*:lts:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.