Input Validation Issues in Axis VAPIX API Affects Usability

CVE-2025-9524

What is CVE-2025-9524?

The Axis VAPIX API's port.cgi component is susceptible to an input validation vulnerability, which can lead to unexpected process crashes and affect the overall usability of the service. This issue requires an attacker to authenticate with a user account that has viewer, operator, or administrator privileges to execute successful exploitation attempts. Proper input validation mechanisms are essential to ensure the integrity and availability of the API services.

References