CVE 4.3 MEDIUM

CVE-2025-9524_CVE-2025-9524

4.3 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Description

The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability. This vulnerability can only be exploited after authenticating with a viewer- operator- or administrator-privileged service account.

Basic Information

ID CVE-2025-9524
Source Axis
Published Nov 11, 2025 at 07:25
Modified Nov 11, 2025 at 07:33

Affected Product

Vendor Axis Communications AB
Product AXIS OS
Version 6.50.0
Affected Versions Axis Communications AB AXIS OS 6.50.0
Axis Communications AB AXIS OS 7.0.0
Axis Communications AB AXIS OS 9.0.0
Axis Communications AB AXIS OS 10.0.0
Axis Communications AB AXIS OS 11.0.0
Axis Communications AB AXIS OS 12.0.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.