CVE-2025-0360 Information

Description

During an annual penetration test conducted on behalf of Axis Communication Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect user privilege level in the VAPIX service account D-Bus API.

Reference

https://www.axis.com/dam/public/b1/fe/46/cve-2025-0360pdf-en-US-466887.pdf