CVE-2025-0324

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-791

Affected software

No affected versions have been published.

Timeline

Published
Jun 2, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-03254.3A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to CVE-2025-0326The system fails to invalidate existing access tokens associated with sub-organization users during sensitive account management operations CVE-2025-03277.8CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and the other acting asCVE-2025-03287.3A vulnerability, which was classified as critical, has been found in KaiYuanTong ECT Platform up to 2.0.0. Affected by this issue is some unCVE-2025-03294.8The AI ChatBot for WordPress WordPress plugin before 6.2.4 does not sanitise and escape some of its settings, which could allow high privilCVE-2025-03307.5In berriai/litellm version v1.52.1, an issue in proxy_server.py causes the leakage of Langfuse API keys when an error occurs while parsing tCVE-2025-03315.3A vulnerability, which was classified as critical, has been found in YunzMall up to 2.4.2. This issue affects the function changePwd of the CVE-2025-03329.8In Progress® Telerik® UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to deCVE-2025-03338.8A vulnerability, which was classified as critical, was found in leiyuxi cy-fast 1.0. Affected is the function listData of the file /sys/roleCVE-2025-03348.8A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData ofCVE-2025-03359.8A vulnerability was found in code-projects Online Bike Rental System 1.0 and classified as critical. Affected by this issue is some unknown CVE-2025-03369.8A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the
CVE-2025-0324: High severity, CVSS 8.8 | Vulnix