Exploit / PoCcritical
Security Researchers Uncover Critical Flaws in Axis CCTV Software
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-30023+1 related CVE | The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack | 9.0 group max | <1% | ||
| CVE-2025-30024 | The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack | 6.8 | <1% | ||
| CVE-2025-30025 | The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation | 4.8 | <1% |
From the original article
3 min read at infosecurity-magazine.com
Thousands of organizations could be vulnerable to attack after researchers discovered four critical vulnerabilities in the products of Axis Communications, a leading manufacturer of CCTV cameras and surveillance equipment. OT security firm Claroty and its research branch, Team82, shared findings at Black Hat USA, in Las Vegas, on August 6. Flaws in Axis Proprietary Client-Server Communication Protocol
By Kevin Poireault · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.