medium4.3
CVE-2025-0361
During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowe…
Impact
During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for unauthenticated username enumeration through the VAPIX Device Configuration SSH Management API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Axis | Axis Os | from 11.11.0 before 12.3.56 |
| Axis | Axis Os 2024 | before 11.11.141 |