Description
The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Axis Communications AB | AXIS Camera Station Pro | <6.9 | — |
| Axis Communications AB | AXIS Camera Station | <5.58 | — |
| Axis Communications AB | AXIS Device Manager | <5.32 | — |
Advisories 2
- WID-SEC-2025-1765 Axis Camera Station und Device Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 2, 2026
- ICSA-25-352-08 Axis Communications Camera Station Pro, Camera Station, and Device Manager (Update B) CISA ICS & IT advisories · Jan 22, 2026