VulnerabilityDeferred

CVE-2025-9055

The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privileges.

MEDIUM 6.4EPSS 0.11%

Does this matter?

Lower severity and a low EPSS score (0.11%). Track it; it rarely justifies an emergency change on its own.

Description

The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privileges. This flaw can only be exploited after authenticating with an administrator-privileged service account.

CVSS 3.1: 6.4 MEDIUMCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.11% probability · 2th percentile
CISA KEV: Not listed
Weakness: CWE-250
Source: product-security@axis.com

References

https://www.axis.com/dam/public/23/a3/00/cve-2025-9055pdf-en-US-504219.pdf

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.