CVE-2025-0325

{"id": "CVE-2025-0325", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "product-security@axis.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2025-06-02T08:15:20.767", "references": [{"url": "https://www.axis.com/dam/public/d0/ae/fe/cve-2025-0325pdf-en-US-483808.pdf", "source": "product-security@axis.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "product-security@axis.com", "description": [{"lang": "en", "value": "CWE-628"}, {"lang": "en", "value": "CWE-1287"}]}], "descriptions": [{"lang": "en", "value": "A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker\u00a0to block access to the guard tour configuration page in the web interface of the Axis device."}, {"lang": "es", "value": "Un par\u00e1metro de Guard Tour VAPIX API permit\u00eda el uso de valores arbitrarios y se pod\u00eda llamar incorrectamente, lo que permit\u00eda a un atacante bloquear el acceso a la p\u00e1gina de configuraci\u00f3n de ronda de guardia en la interfaz web del dispositivo Axis."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "product-security@axis.com"}