← CVE Intelligence

CVE-2025-0361

Axis Communications AB / AXIS OS PUBLISHED

Description (CNA)

During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for unauthenticated username enumeration through the VAPIX Device Configuration SSH Management API.

Affected (CNA)

Vendor / productVersions
Axis Communications AB / AXIS OSaffected 11.11.0 before 11.11.141; affected 12.0.0 before 12.3.56

CWE

CWE-203

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.