Axis Os 2024
Approved changes feed: RSS · Atom
cpe:2.3:o:axis:axis_os_2024:*:*:*:*:lts:*:*:*
part: o version: * update: *
| Vendor | Axis (70b79958-9d75-5ad6-90bd-d85cad17d4e7) |
|---|---|
| Product | Axis Os 2024 (576dae81-5ff1-5a51-b91c-86eabb6d9d5f) |
| Edition | * |
| Language | * |
| Software edition | lts |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0361 |
vulnerable | 2026-06-08 07:02:24.452315 |
Details available
MEDIUM (4.3)
During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for unauthenticated username enumeration through the VAPIX Device Configuration SSH Management API.
Published: 2025-04-08T05:38:02.631Z
Updated: 2025-04-08T14:50:47.286Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0360 |
vulnerable | 2026-06-08 07:02:24.452000 |
Details available
HIGH (7.8)
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect user privilege level in the VAPIX service account D-Bus API.
Published: 2025-03-04T05:24:00.720Z
Updated: 2025-03-26T12:09:06.856Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0359 |
vulnerable | 2026-06-08 07:02:24.451587 |
Details available
HIGH (8.5)
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the ACAP Application framework that allowed applications to access restricted D-Bus methods within the framework.
Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
Published: 2025-03-04T05:21:34.944Z
Updated: 2025-03-28T07:03:53.756Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0324 |
vulnerable | 2026-06-08 07:02:24.362821 |
Details available
CRITICAL (9.4)
The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.
Published: 2025-06-02T07:32:56.772Z
Updated: 2025-06-02T13:26:30.431Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8160 |
vulnerable | 2026-06-08 07:00:22.793510 |
Details available
LOW (3.8)
Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files from/to the Axis device. This flaw can only be exploited after authenticating with an administrator-privileged service account.
Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
Published: 2024-11-26T07:27:32.229Z
Updated: 2025-03-28T07:18:14.700Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6979 |
vulnerable | 2026-06-08 06:58:20.881428 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47261 |
vulnerable | 2026-06-08 06:48:11.642825 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47259 |
vulnerable | 2026-06-08 06:48:11.640902 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.