CVEvulnerability

CVE-2025-0325

4.3 MEDIUM Published 2025-06-02 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-06-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-1287, CWE-628

Description

A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour configuration page in the web interface of the Axis device.

Related

Weakness · CWE (2)

  • CWE-1287 Improper Validation of Specified Type of Input weakness
  • CWE-628 Function Call with Incorrectly Specified Arguments weakness

References