CVE-2025-30023

Published: Jul 11, 2025Modified: Jun 17, 2026

9.0

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.3 / Impact: 6.0

Source: product-security@axis.com (Secondary)

Description

The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack.

Affected (3)

Products: Axis: Camera Station, Camera Station Pro, Device Manager

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Axis Camera Station	Before 5.58.47195
Axis Camera Station Pro	Before 6.9.47069
Axis Device Manager	Before 5.32.137

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (1)

https://www.axis.com/dam/public/9b/a5/72/cve-2025-30023pdf-en-US-485733.pdf

Source: product-security@axis.com

Vendor Advisory

Timeline

No history available yet.