CVE-2025-0325

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour configuration page in the web interface of the Axis device.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-628 CWE-1287

Affected software

No affected versions have been published.

Timeline

Published: Jun 2, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-0326The system fails to invalidate existing access tokens associated with sub-organization users during sensitive account management operations CVE-2025-03277.8CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and the other acting as CVE-2025-03287.3A vulnerability, which was classified as critical, has been found in KaiYuanTong ECT Platform up to 2.0.0. Affected by this issue is some un CVE-2025-03294.8The AI ChatBot for WordPress WordPress plugin before 6.2.4 does not sanitise and escape some of its settings, which could allow high privil CVE-2025-03307.5In berriai/litellm version v1.52.1, an issue in proxy_server.py causes the leakage of Langfuse API keys when an error occurs while parsing t CVE-2025-03315.3A vulnerability, which was classified as critical, has been found in YunzMall up to 2.4.2. This issue affects the function changePwd of the CVE-2025-03329.8In Progress® Telerik® UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to de CVE-2025-03338.8A vulnerability, which was classified as critical, was found in leiyuxi cy-fast 1.0. Affected is the function listData of the file /sys/role CVE-2025-03348.8A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData of CVE-2025-03359.8A vulnerability was found in code-projects Online Bike Rental System 1.0 and classified as critical. Affected by this issue is some unknown CVE-2025-03369.8A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the CVE-2025-03376.5ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulne