CVE-2025-0361
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 8, 2025
CWE ID 203
Summary
CVE-2025-0361 is a vulnerability identified by Truesec during a penetration test for Axis Communications. The flaw lies in the VAPIX Device Configuration framework, specifically the SSH Management API. This issue permits unauthenticated attackers to perform username enumeration, potentially revealing valid usernames for further exploitation. This vulnerability poses a significant risk to organizations using the affected Axis Communications products, and timely mitigation measures are highly recommended.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Axis OS