4.3
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Description
The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability. This vulnerability can only be exploited after authenticating with a viewer- operator- or administrator-privileged service account.
Basic Information
ID
CVE-2025-9524
Source
Axis
Published
Nov 11, 2025 at 07:25
Modified
Nov 11, 2025 at 07:33
Affected Product
Vendor
Axis Communications AB
Product
AXIS OS
Version
6.50.0
Affected Versions
Axis Communications AB AXIS OS 6.50.0
Axis Communications AB AXIS OS 7.0.0
Axis Communications AB AXIS OS 9.0.0
Axis Communications AB AXIS OS 10.0.0
Axis Communications AB AXIS OS 11.0.0
Axis Communications AB AXIS OS 12.0.0
Axis Communications AB AXIS OS 7.0.0
Axis Communications AB AXIS OS 9.0.0
Axis Communications AB AXIS OS 10.0.0
Axis Communications AB AXIS OS 11.0.0
Axis Communications AB AXIS OS 12.0.0