PT-2025-17600 · Axis · Axis Camera Station Pro

Published 2025-04-23 · Updated 2025-04-23 · CVE-2025-1056

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions AXIS Camera Station Pro (affected versions not specified)

Description A non-admin user can modify a specific file used by the server to create files or change the content of files in an admin-protected location. The issue was identified by Gee-netics, a member of the AXIS Camera Station Pro Bug Bounty Program.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-73

Related Identifiers

BDU:2025-07178

CVE-2025-1056

Affected Products

Axis Camera Station Pro

References · 8

• https://axis.com/dam/public/e4/2e/b2/cve-2025-1056pdf-en-US-479106.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1056 · Security Note
• https://bdu.fstec.ru/vul/2025-07178 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1056 · Vendor Advisory
• https://t.me/cvetracker/22184 · Telegram Post
• https://t.me/cvedetector/23577 · Telegram Post
• https://t.me/cvenotify/119486 · Telegram Post
• https://twitter.com/CVEnew/status/1914919781355999245 · Twitter Post