CVE-2025-1056: Medium severity Axis Camera Station Pro vulnerability
Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A non-admin user can modify this file to either create files or change the content of files in an admin-protected location. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1056?
CVE-2025-1056 is considered a high-severity vulnerability due to its potential for unauthorized file manipulation by non-admin users.
How do I fix CVE-2025-1056?
To fix CVE-2025-1056, update your Axis Camera Station Pro to the latest patched version provided by Axis.
What kind of access does CVE-2025-1056 grant to attackers?
CVE-2025-1056 allows non-admin users to create or modify files in an admin-protected location, potentially leading to further exploits.
Which versions of Axis Camera Station Pro are affected by CVE-2025-1056?
CVE-2025-1056 affects certain versions of Axis Camera Station Pro prior to the patched release from Axis.
Is there a workaround for CVE-2025-1056 if I cannot update immediately?
While the best mitigation is to update, restricting non-admin user permissions may provide temporary protection against CVE-2025-1056.