Privilege Escalation Vulnerability in VAPIX Device Configuration Framework by Axis Communications

CVE-2025-0360

What is CVE-2025-0360?

During a routine penetration test, a vulnerability was identified in the VAPIX Device Configuration framework by Axis Communications. This flaw could potentially allow an attacker to gain unauthorized access to the VAPIX service account D-Bus API, resulting in an inappropriate elevation of user privileges. As a consequence, this issue may expose critical system functions and sensitive data to unauthorized users, posing a significant risk to affected installations.

References