Vendor
Axis Communications AB
100 known vulnerabilities.
Products
AXIS OS 61
AXIS Camera Station Pro 23
AXIS Camera Station 7
AXIS License Plate Verifier 6
AXIS Camera Station 5 4
AXIS Device Manager 4
Signed Video Framework 2
Signed media verifier 2
Axis File Player 2
AXIS A1001 Network Door Controller 2
AXIS A1601 - Secure Entry 1
AXIS A1810 - Secure Entry 1
AXIS A1710 1
AXIS A1610 - Secure Entry 1
AXIS A1210 - Secure Entry 1
AXIS IP Utility 1
AXIS Q6128-E PTZ Network Camera 1
AXIS P1428-E Network Camera 1
AXIS Optimizer 1
AXIS A1210-B Network Door Controller 1
AXIS A1601 Network Door Controller 1
AXIS A1610 (-B) Network Door Controller 1
AXIS A8207-VE Network Video Door Station 1
AXIS A8207-VE Mk II Network Video Door Station 1
AXIS A8207-VE Mk II 1
AXIS Q3527-LVE 1
AXIS A1001 0
100 results · Feed
-
Medium 6.8
The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only b…
-
Medium 6.4
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to pot…
-
Medium 6.7
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vul…
-
Medium 6.7
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vul…
-
Medium 6.7
ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerabi…
-
Medium 5.1
During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticate…
-
Medium 5.3
The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required.
-
Medium 4.8
The communication protocol used between the server process and the service control had a flaw that could lead to a loca…
-
Medium 6.8
The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the mi…
-
Critical 9.0
The communication protocol used between client and server had a flaw that could lead to an authenticated user performin…
-
High 8.8
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Dev…
-
Medium 4.3
A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacke…
-
Critical 9.4CVE-2025-0324 Public exploit
The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain admin…
-
Medium 5.9
Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to…
-
Medium 6.1
Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the…
-
Medium 4.3
During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX De…
-
Medium 4.3
51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have s…
-
High 7.8
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Dev…
-
High 8.5
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the ACAP Appl…
-
Medium 5.3
Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to …
-
Medium 6.5
51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did not have a sufficient…
-
Low 3.5
Girishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi did not have a…
-
Medium 6.3
Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated ma…
-
Low 3.8
Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a suffici…
-
Medium 4.3
51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API managedoverlayimages.cgi was vulnerable…
-
High 7.5
Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lea…
-
Medium 4.4
Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program has found that it is possible to edit and/or remove vi…
-
Medium 6.3
Seth Fogie, member of the AXIS Camera Station Pro Bug Bounty Program, has found that the Incident report feature may ex…
-
Medium 4.2
Gee-netics, member of the AXIS Camera Station Pro Bug Bounty Program has found that it is possible for a non-admin user…
-
Medium 6.1
During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device …
-
Medium 6.8
Amin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a broken access control which would lead to less-pr…
-
Medium 6.5
51l3nc3, member of the AXIS OS Bug Bounty Program, has found that a Guard Tour VAPIX API parameter allowed the use of a…
-
Medium 6.5
Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API alwaysmulti.cgi was vulnerable for fil…
-
Medium 4.3
Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API ledlimit.cgi was vulnerable for path t…
-
Medium 5.3
Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may expose sensitive traffic b…
-
Medium 6.5
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi wa…
-
Medium 6.5
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs local_list.cgi, create_overlay.cg…
-
Medium 5.4
Insufficient input validation in VAPIX API create_overlay.cgi
Vintage, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API create_overlay.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticating with an operator-…
-
Medium 6.3
Brandon Rothel from QED Secure Solutions and Sam Hanson of Dragos have found that the VAPIX API tcptest.cgi did not hav…
-
High 7.6
During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device …