CVE-2025-30023

State
Published
Severity
9.0 Critical
Published
Jul 11, 2025
Updated
Jul 11, 2025
Reserved
Mar 14, 2025

Read the record on cve.org

Description

The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack.

Scores

CVSSScoreVectorSource
3.19.0 CriticalCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HAxis

Weaknesses

  • CWE-502 Deserialization of Untrusted Data

Affected Products

ProductVersions
AXIS Camera Station ProAxis Communications AB
  • <6.9Affected
AXIS Camera StationAxis Communications AB
  • <5.58Affected
AXIS Device ManagerAxis Communications AB
  • <5.32Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.