ICSA-25-352-08

icsaUScisa_csaf_ot

Axis Communications Camera Station Pro, Camera Station, and Device Manager (Update B)

view advisory published 2025-12-18

Successful exploitation of these vulnerabilities could result in an attacker executing arbitrary code, executing a man-in-middle style attack, or bypass authentication.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2025-30026UScritical9.8OT elevated—
The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required.
CVE-2025-30025UShigh7.8—
The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation.
CVE-2025-30024US——
The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack.
CVE-2025-30023US——
The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack.
02

references

External citations — patches, advisories, analysis.

03

remediations (18)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan