AO
Product
Axis OS 2024
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 3Low 1
Watch
Add Axis OS 2024 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-0324 | 8.8 | Jun 2 | The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges Affected: 11.8.0 before 11.11.140 |
| CVE-2025-0360 | 7.8 | Mar 4 | During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect… Affected: before 11.11.135 |
| CVE-2024-6979 | 7.5 | Sep 10 | Amin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a broken access control which would lead to less-privileged operator- and/or viewer accounts having more… Affected: 11.11.0 before 11.11.94 |
| CVE-2024-47259 | 7.1 | Mar 4 | Girishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi did not have a sufficient input validation allowing for a possible command… Affected: before 11.11.126 |
Showing 4