CVE-2025-0325CWE-1287CWE-628

A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour…

Medium · published June 2, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
31.5
In the wild
Unconfirmed
What it is

A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour configuration page in the web interface of the Axis device.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00386 · 31.5th percentile
Weaknesses
CWE-1287 · Improper Validation of Specified Type of Input; CWE-628 · Function Call with Incorrectly Specified Arguments
Published
2025-06-02T07:36Z
EPSS history
Timeline
  • 02 JUN 07:36Z
    A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour…
    cvelistv5