CVE-2025-0361
During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for unauthentica…
Published: 2025-04-08 · CVSS: 4.3 · CVSS 3.1
During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for unauthenticated username enumeration through the VAPIX Device Configuration SSH Management API.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7