Vulnerability · Published Apr 23, 2025 · Assigned by Axis
CVE-2025-1056
Medium 6.1
In plain English
A medium-severity security flaw in AXIS Camera Station Pro from Axis Communications AB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Official description
Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A non-admin user can modify this file to either create files or change the content of files in an admin-protected location. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Axis Communications AB | AXIS Camera Station Pro | 6 – before 6.8 |
Weakness: CWE-73 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H