CVE-2025-0360 — Axis Communications AB / AXIS OS

CVE-2025-0360

Axis Communications AB / AXIS OS PUBLISHED

Description (CNA)

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect user privilege level in the VAPIX service account D-Bus API.

Affected (CNA)

Vendor / product	Versions
Axis Communications AB / AXIS OS	affected 11.11.0 before 11.11.135; affected 12.0.0 before 12.2.41

CWE

CWE-863

References

https://www.axis.com/dam/public/b1/fe/46/cve-2025-0360pdf-en-US-466887.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.