Vulnerability-Lookup

CERTFR-2026-AVI-0023

Vulnerability from certfr_avis - Published: 2026-01-12 - Updated: 2026-01-12

De multiples vulnérabilités ont été découvertes dans les produits Axis. Elles permettent à un attaquant de provoquer une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Axis	Axis OS	Axis OS Active Track versions 12.x antérieures à 12.3.4
Axis	Axis OS	Axis OS LTS 2022 versions 10.x antérieures à 10.12.270
Axis	Axis OS	Axis OS (anciennement LTS) versions 6.x antérieures à 6.50.5.19
Axis	Camera Station Pro	Axis Camera Station Pro versions antérieures à 6.8
Axis	Axis OS	Axis OS (anciennement LTS) versions 8.x antérieures à 8.40.66
Axis	Axis OS	Axis OS LTS 2020 versions 9.x antérieures à 9.80.90
Axis	Device Manager	Axis Device Manager versions antérieures à 5.32
Axis	Axis OS	Axis OS LTS 2024 versions 11.x antérieures à 11.11.127

References

Title

Publication Time

Tags

Bulletin de sécurité Axis cve-2025-30025pdf-en-US-517962	2026-01-12	vendor-advisory
Bulletin de sécurité Axis cve-2024-47262pdf-en-US-466884	2026-01-12	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Axis OS Active Track versions 12.x ant\u00e9rieures \u00e0 12.3.4",
      "product": {
        "name": "Axis OS",
        "vendor": {
          "name": "Axis",
          "scada": false
        }
      }
    },
    {
      "description": "Axis OS LTS 2022 versions 10.x ant\u00e9rieures \u00e0 10.12.270",
      "product": {
        "name": "Axis OS",
        "vendor": {
          "name": "Axis",
          "scada": false
        }
      }
    },
    {
      "description": "Axis OS (anciennement LTS) versions 6.x ant\u00e9rieures \u00e0 6.50.5.19",
      "product": {
        "name": "Axis OS",
        "vendor": {
          "name": "Axis",
          "scada": false
        }
      }
    },
    {
      "description": "Axis Camera Station Pro versions ant\u00e9rieures \u00e0 6.8",
      "product": {
        "name": "Camera Station Pro",
        "vendor": {
          "name": "Axis",
          "scada": false
        }
      }
    },
    {
      "description": "Axis OS (anciennement LTS) versions 8.x ant\u00e9rieures \u00e0 8.40.66",
      "product": {
        "name": "Axis OS",
        "vendor": {
          "name": "Axis",
          "scada": false
        }
      }
    },
    {
      "description": "Axis OS LTS 2020 versions 9.x ant\u00e9rieures \u00e0 9.80.90",
      "product": {
        "name": "Axis OS",
        "vendor": {
          "name": "Axis",
          "scada": false
        }
      }
    },
    {
      "description": "Axis Device Manager versions ant\u00e9rieures \u00e0 5.32",
      "product": {
        "name": "Device Manager",
        "vendor": {
          "name": "Axis",
          "scada": false
        }
      }
    },
    {
      "description": "Axis OS LTS 2024 versions 11.x ant\u00e9rieures \u00e0 11.11.127",
      "product": {
        "name": "Axis OS",
        "vendor": {
          "name": "Axis",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-30025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30025"
    },
    {
      "name": "CVE-2024-47262",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47262"
    }
  ],
  "initial_release_date": "2026-01-12T00:00:00",
  "last_revision_date": "2026-01-12T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0023",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-01-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Axis. Elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Axis",
  "vendor_advisories": [
    {
      "published_at": "2026-01-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Axis cve-2025-30025pdf-en-US-517962",
      "url": "https://www.axis.com/dam/public/f2/28/d2/cve-2025-30025pdf-en-US-517962.pdf"
    },
    {
      "published_at": "2026-01-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Axis cve-2024-47262pdf-en-US-466884",
      "url": "https://www.axis.com/dam/public/a3/18/6e/cve-2024-47262pdf-en-US-466884.pdf"
    }
  ]
}

CVE-2025-30025 (GCVE-0-2025-30025)

Vulnerability from cvelistv5 – Published: 2025-07-11 06:04 – Updated: 2026-01-07 09:59

Summary

The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation.

Severity ?

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:L/SI:L/SA:L

CWE

CWE-502 - Deserialization of Untrusted Data

Assigner

Axis

References

URL

Tags

https://www.axis.com/dam/public/f2/28/d2/cve-2025…

Impacted products

Vendor

Product

Version

Axis Communications AB

AXIS Device Manager

Affected: <5.32

	Axis Communications AB	AXIS Camera Station Pro	Affected: <6.8
	Axis Communications AB	AXIS Camera Station	Affected: <6

Credits

Noam Moshe of Claroty Team82

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-30025",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-11T13:22:32.432800Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-11T13:22:38.539Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AXIS Device Manager",
          "vendor": "Axis Communications AB",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c5.32"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "AXIS Camera Station Pro",
          "vendor": "Axis Communications AB",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c6.8"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "AXIS Camera Station",
          "vendor": "Axis Communications AB",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c6"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Noam Moshe of Claroty Team82"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The communication protocol used between the\nserver process and the service control had a flaw that could lead to a local privilege escalation.\n\n\u003cbr\u003e"
            }
          ],
          "value": "The communication protocol used between the\nserver process and the service control had a flaw that could lead to a local privilege escalation."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:L/SI:L/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-502",
              "description": "CWE-502 Deserialization of Untrusted Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-07T09:59:44.547Z",
        "orgId": "f2daf9a0-02c2-4b83-a01d-63b3b304b807",
        "shortName": "Axis"
      },
      "references": [
        {
          "url": "https://www.axis.com/dam/public/f2/28/d2/cve-2025-30025pdf-en-US-517962.pdf"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f2daf9a0-02c2-4b83-a01d-63b3b304b807",
    "assignerShortName": "Axis",
    "cveId": "CVE-2025-30025",
    "datePublished": "2025-07-11T06:04:40.972Z",
    "dateReserved": "2025-03-14T05:27:55.732Z",
    "dateUpdated": "2026-01-07T09:59:44.547Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-47262 (GCVE-0-2024-47262)

Vulnerability from cvelistv5 – Published: 2025-03-04 05:19 – Updated: 2025-03-28 07:11

Summary

Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to a race condition attack allowing for an attacker to block access to the web interface of the Axis device. Other API endpoints or services not making use of param.cgi are not affected. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

Severity ?

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-1287 - Improper Validation of Specified Type of Input

Assigner

Axis

References

URL

Tags

https://www.axis.com/dam/public/a3/18/6e/cve-2024…

Impacted products

	Vendor	Product	Version
	Axis Communications AB	AXIS OS	Affected: 6.50.0 , < 6.50.5.19 (semver) Affected: 7.0.0 , < 8.40.66 (semver) Affected: 9.0.0 , < 9.80.90 (semver) Affected: 10.0.0 , < 10.12.270 (semver) Affected: 11.0.0 , < 11.11.127 (semver) Affected: 12.0.0 , < 12.3.4 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47262",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-04T15:25:28.866591Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-11T16:08:43.647Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AXIS OS",
          "vendor": "Axis Communications AB",
          "versions": [
            {
              "lessThan": "6.50.5.19",
              "status": "affected",
              "version": "6.50.0",
              "versionType": "semver"
            },
            {
              "lessThan": "8.40.66",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "9.80.90",
              "status": "affected",
              "version": "9.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "10.12.270",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "11.11.127",
              "status": "affected",
              "version": "11.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "12.3.4",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to a race condition attack allowing for an attacker to block access to the web interface of the Axis device. Other API endpoints or services not making use of param.cgi are not affected. \nAxis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.\n\n\n\n\n\n\u003cbr\u003e"
            }
          ],
          "value": "Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to a race condition attack allowing for an attacker to block access to the web interface of the Axis device. Other API endpoints or services not making use of param.cgi are not affected. \nAxis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1287",
              "description": "CWE-1287: Improper Validation of Specified Type of Input",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-28T07:11:08.168Z",
        "orgId": "f2daf9a0-02c2-4b83-a01d-63b3b304b807",
        "shortName": "Axis"
      },
      "references": [
        {
          "url": "https://www.axis.com/dam/public/a3/18/6e/cve-2024-47262pdf-en-US-466884.pdf"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f2daf9a0-02c2-4b83-a01d-63b3b304b807",
    "assignerShortName": "Axis",
    "cveId": "CVE-2024-47262",
    "datePublished": "2025-03-04T05:19:09.007Z",
    "dateReserved": "2024-09-23T16:37:50.256Z",
    "dateUpdated": "2025-03-28T07:11:08.168Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTFR-2026-AVI-0023

Solutions

CVE-2025-30025 (GCVE-0-2025-30025)

CVE-2024-47262 (GCVE-0-2024-47262)

Tags

Sightings

Nomenclature