CVE-2025-0926

HIGH EPSS 8.5%
Published Apr 23, 20251y ago · Modified Jun 17, 20262w ago
7.3 CVSS 3.1
High
Find Similar
Published Apr 23, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files causing a boot loop by redirecting a file deletion when recording video. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

CVSS Details

Base Score
7.3
Exploitability
2.1
Impact
5.2
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction Required
Scope Unchanged
Confidentiality None
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
8.5% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-732

Affected Products 1

VendorProductVersionRange
axiscamera_station_pro* <6.8.43213

References 1

  • axis.com https://www.axis.com/dam/public/9d/fe/3f/cve-2025-0926pdf-en-US-479105.pdf
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.