Camera Station Pro
Vendor:
First CVE: Jan 7, 2025 · Active for 1 year
11
Total CVEs
More Total CVEs than 89% of tracked products
5.5
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 39% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Camera Station Pro over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 7, 2025
18 months ago
Most Recent CVE
Feb 10, 2026
164 days ago
CVE Severity & Scoring
Camera Station Pro11 CVEs
55%
27%
18%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (18.2%)
Network3 (27.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network6 (54.5%)
Attack Complexity
Low11 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None10 (90.9%)
Unknown0 (0.0%)
Required1 (9.1%)
Privileges Required
Low9 (81.8%)
High1 (9.1%)
None1 (9.1%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-30026CRITICAL The AXIS Camera Station Server had a flaw that allowed
to bypass authentication that is normally required. | Jul 11, 2025 | 9.8 | 30 | NO | NO |
CVE-2025-30023CRITICAL The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack. | Jul 11, 2025 | 9.0 | 29 | NO | NO |
CVE-2025-11547HIGH AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user. | Feb 10, 2026 | 7.8 | 25 | NO | NO |
CVE-2025-30025HIGH The communication protocol used between the
server process and the service control had a flaw that could lead to a local privilege escalation. | Jul 11, 2025 | 7.8 | 22 | NO | NO |
CVE-2025-12063MEDIUM An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having the appropriate permissions. | Feb 10, 2026 | 5.7 | 20 | NO | NO |
CVE-2025-1056MEDIUM Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A non-admin user can modify this file to ei | Apr 23, 2025 | 6.5 | 20 | NO | NO |
CVE-2025-0926HIGH Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files causing a boot loop by redirecting a fil | Apr 23, 2025 | 7.3 | 20 | NO | NO |
CVE-2025-7622MEDIUM During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticated attacker to access internal resources on the server was dis | Aug 12, 2025 | 5.7 | 19 | NO | NO |
CVE-2025-13064MEDIUM A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This attack is only possible | Feb 10, 2026 | 4.5 | 18 | NO | NO |
CVE-2025-12757MEDIUM An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are not permitted to. | Feb 10, 2026 | 4.6 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (11 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (11 CVEs).
Media Mentions
Signals from CVEs in this product scope (11 CVEs).
Top CNAs Publishing CVEs For Camera Station Pro
Top CWEs
Versions
No cataloged versions.