ICSA-25-352-08

icsaUScisa_csaf_ot

Axis Communications Camera Station Pro, Camera Station, and Device Manager (Update B)

Advisory ansehen veröffentlicht 2025-12-18

Successful exploitation of these vulnerabilities could result in an attacker executing arbitrary code, executing a man-in-middle style attack, or bypass authentication.

01

beschreibt (4)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-30026UScritical9.8OT erhöht—
The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required.
CVE-2025-30025UShigh7.8—
The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation.
CVE-2025-30024US——
The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack.
CVE-2025-30023US——
The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (18)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan