CVE-2025-0358: High severity Axis Communication VAPIX Device Configuration vulnerability
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0358?
CVE-2025-0358 has been rated with a high severity due to the risk of privilege escalation from a lower-privileged user to an administrator.
How do I fix CVE-2025-0358?
To mitigate CVE-2025-0358, it is recommended to update the affected VAPIX Device Configuration framework to the latest version provided by Axis Communications.
What is the impact of CVE-2025-0358?
The impact of CVE-2025-0358 allows unauthorized users to gain elevated privileges, potentially compromising system integrity and security.
Which products are affected by CVE-2025-0358?
CVE-2025-0358 affects products that utilize the Axis Communications VAPIX Device Configuration framework.
When was CVE-2025-0358 discovered?
CVE-2025-0358 was discovered during an annual penetration test conducted by Truesec on behalf of Axis Communications.