GCVE - cpe:2.3:a:axis:device_manager:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:axis:device_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Axis (`70b79958-9d75-5ad6-90bd-d85cad17d4e7`)
Product	Device Manager (`24b53909-f8ae-5eb6-84b4-c08d66442fda`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-30025`	vulnerable	2026-06-08 07:16:58.849129	Details available The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation. Published: 2025-07-11T06:04:40.972Z Updated: 2026-01-07T09:59:44.547Z Open on db.gcve.eu Reference links https://www.axis.com/dam/public/f2/28/d2/cve-2025-30025pdf-en-US-517962.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-30024`	vulnerable	2026-06-08 07:16:58.848384	Details available MEDIUM (6.8) The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack. Published: 2025-07-11T06:03:29.926Z Updated: 2025-07-11T16:28:42.727Z Open on db.gcve.eu Reference links https://www.axis.com/dam/public/01/d9/24/cve-2025-30024pdf-en-US-485734.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-30023`	vulnerable	2026-06-08 07:16:58.847762	Details available CRITICAL (9) The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack. Published: 2025-07-11T06:02:00.620Z Updated: 2025-07-11T16:36:45.516Z Open on db.gcve.eu Reference links https://www.axis.com/dam/public/9b/a5/72/cve-2025-30023pdf-en-US-485733.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31989`	vulnerable	2026-06-08 05:31:54.544989	Details available A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices. Published: 2021-08-25T18:29:41.000Z Updated: 2024-11-08T08:21:08.424Z Open on db.gcve.eu Reference links https://www.axis.com/files/tech_notes/CVE-2021-31989.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.