DeutschShown in its original language — a full translation is planned for a future version.
Axis Camera Station und Device Manager: Mehrere Schwachstellen
view advisory published 2025-08-11
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Axis Camera Station und Axis Device Manager ausnutzen, um die Authentifizierung zu umgehen, erhöhte Privilegien zu erlangen, eine Man-in-the-Middle-Attacke durchzuführen und beliebigen Code auszuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-30026US | critical9.8OT elevated | — | ||
The AXIS Camera Station Server had a flaw that allowed
to bypass authentication that is normally required. | ||||
| CVE-2025-30025US | high7.8 | — | ||
The communication protocol used between the
server process and the service control had a flaw that could lead to a local privilege escalation. | ||||
| CVE-2025-30024US | — | — | ||
The communication protocol used between client
and server had a flaw that could be leveraged to execute a man in the middle attack. | ||||
| CVE-2025-30023US | — | — | ||
The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack. | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan