CVE-2025-30023

—

CVSS 3.1

9.0 critical

EPSS

<1%p43

Published

Jul 11, 2025 (Jul 11, 2025)

Modified

Jun 17, 2026

Description

The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack.

Vendors: axis
Products: camera station, camera station pro, device manager
Weakness: CWE-502
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news3 stories

6,500 Servers Expose Axis Remoting Protocol; 4,000 in U.S. Vulnerable to Exploits

The Hacker NewsAug 28, 04:40 UTC · Aug 28, 2025Exploit / PoC in the wildCVE-2025-30023 CVE-2025-30024 CVE-2025-30025+1 CVEs

⚡ Weekly Recap: BadCam Attack, WinRAR 0-Day, EDR Killer, NVIDIA Flaws, Ransomware Attacks & More

The Hacker NewsAug 12, 04:40 UTC · Aug 12, 2025Ransomware in the wildCVE-2025-54948 CVE-2025-54987 CVE-2025-8088+30 CVEs

Security Researchers Uncover Critical Flaws in Axis CCTV Software

Infosecurity MagazineAug 6, 22:30 UTC · Aug 6, 2025Exploit / PoC CVE-2025-30023 CVE-2025-30024 CVE-2025-30025+1 CVEs