2 lines
2.4 KiB
JSON
2 lines
2.4 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"AXIS OS","vendor":"Axis Communications AB","versions":[{"lessThan":"6.50.5.21","status":"affected","version":"6.50.0","versionType":"semver"},{"lessThan":"8.40.74","status":"affected","version":"7.0.0","versionType":"semver"},{"lessThan":"9.80.100","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"10.12.278","status":"affected","version":"10.0.0","versionType":"semver"},{"lessThan":"11.11.142","status":"affected","version":"11.0.0","versionType":"semver"},{"lessThan":"12.4.28","status":"affected","version":"12.0.0","versionType":"semver"}]}],"source":"product-security@axis.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour configuration page in the web interface of the Axis device."},{"lang":"es","value":"Un parámetro de Guard Tour VAPIX API permitía el uso de valores arbitrarios y se podía llamar incorrectamente, lo que permitía a un atacante bloquear el acceso a la página de configuración de ronda de guardia en la interfaz web del dispositivo Axis."}],"id":"CVE-2025-0325","lastModified":"2026-06-17T08:26:16.903","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"product-security@axis.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0325","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-06-02T13:21:58.179166Z","version":"2.0.3"}}]},"published":"2025-06-02T08:15:20.767","references":[{"source":"product-security@axis.com","url":"https://www.axis.com/dam/public/d0/ae/fe/cve-2025-0325pdf-en-US-483808.pdf"}],"sourceIdentifier":"product-security@axis.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-628"},{"lang":"en","value":"CWE-1287"}],"source":"product-security@axis.com","type":"Secondary"}]}
|