CVE-2025-0360: High severity Axis VAPIX Device Configuration vulnerability
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect user privilege level in the VAPIX service account D-Bus API.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0360?
CVE-2025-0360 is classified as a high severity vulnerability due to its potential impact on user privilege levels.
How do I fix CVE-2025-0360?
To fix CVE-2025-0360, it is recommended to update the Axis VAPIX Device Configuration framework to the latest security patch provided by Axis.
What systems are affected by CVE-2025-0360?
CVE-2025-0360 affects the Axis VAPIX Device Configuration framework.
What type of flaw is identified in CVE-2025-0360?
CVE-2025-0360 identifies a flaw in the VAPIX Device Configuration framework that can lead to incorrect user privilege levels.
Is there any workaround for CVE-2025-0360?
Currently, there are no public workarounds for CVE-2025-0360, and users should rely on applying the necessary updates.