CVE-2025-0325
4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Summary
A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour configuration page in the web interface of the Axis device.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Axis Communications AB | AXIS OS | 6.50.0 < 6.50.5.21 | affected |
| Axis Communications AB | AXIS OS | 7.0.0 < 8.40.74 | affected |
| Axis Communications AB | AXIS OS | 9.0.0 < 9.80.100 | affected |
| Axis Communications AB | AXIS OS | 10.0.0 < 10.12.278 | affected |
| Axis Communications AB | AXIS OS | 11.0.0 < 11.11.142 | affected |
| Axis Communications AB | AXIS OS | 12.0.0 < 12.4.28 | affected |
Weaknesses
- CWE-1287: CWE-1287: Improper Validation of Specified Type of Input
- CWE-628: CWE-628: Function Call with Incorrectly Specified Arguments
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.