Axis-communications
4 CVEs tracked since 2023. Since Nov 2023, none of them reached CISA KEV.
Axis-communications CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2023-11 | 4 | 0 |
Products
The products that kept showing up in Axis-communications's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 14 most recently published vulnerabilities affecting Axis-communications.
- CVE-2025-30023The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack.9.0
- CVE-2025-0358During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed a privilege escalation, enabling a l...8.8
- CVE-2025-0324The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.9.4
- CVE-2025-0926Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files causing a boot loop by redirecting a file deletion when r...5.9
- CVE-2025-1056Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A non-admin user can modify this file to either create files...6.1
- CVE-2023-5553During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making it vulnerable to a...7.6
- CVE-2023-21418Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion. This flaw can only be expl...7.1
- CVE-2023-21417Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversal attacks that allows for file/folder deletion. This flaw...7.1
- CVE-2023-21416Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable to a Denial-of-Service attack allowing for an attacker to block access to the ...7.1
- CVE-2023-21415Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exp...6.5
- CVE-2023-21412Non-sanitized user input could lead to SQL injections in AXIS License Plate Verifier7.2
- CVE-2023-21410Non-sanitized user input could lead to arbitrary code execution in AXIS License Plate Verifier7.2
- CVE-2023-21406Heap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication7.1
- CVE-2023-21405Denial-of-Service vulnerability in Axis Network Door Controller's and Axis Network Intercom's OSDP communication6.5
The record
- Peak rank
- #165 in Nov 2023
- Busiest month shown
- Nov 2023, 4 CVEs
- Months with a KEV entry
- 0 since Nov 2023
- Monthly snapshots
- 1 since 2023