Privilege Escalation Vulnerability in VAPIX Device Configuration by Axis Communications

CVE-2025-0358

What is CVE-2025-0358?

A vulnerability was identified within the VAPIX Device Configuration framework developed by Axis Communications, which permits a lower-privileged user to escalate their privileges to that of an administrator. This flaw was uncovered during a routine penetration test and poses significant security risks by potentially allowing unauthorized access and control over critical system functions.

References