PatchTheCVEaxis os 2024 vulnerabilities and fixes
Recent CVEs affecting axis os 2024, with upgrade or downgrade steps. 8 tracked.
Also searched as: axisos2024.
axis os 2024 has 8 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-06-02. Highest priority: CVE-2025-0324 (score 47/100).
- CVE-2025-0361 MEDIUM 4.3 UPGRADE UPGRADE During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the
- CVE-2025-0360 HIGH 7.8 UPGRADE UPGRADE During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the
- CVE-2025-0359 HIGH 8.5 UPGRADE UPGRADE During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the
- CVE-2025-0324 CRITICAL 9.4 UPGRADE UPGRADE The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to g
- CVE-2024-8160 LOW 3.8 UPGRADE UPGRADE Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have
- CVE-2024-6979 MEDIUM 6.8 UPGRADE Amin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a broken access control which would lead t
- CVE-2024-47261 MEDIUM 4.3 UPGRADE UPGRADE 51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did n
- CVE-2024-47259 LOW 3.5 UPGRADE UPGRADE Girishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi did n
FAQ
How do I fix axis os 2024 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is axis os 2024 being exploited right now?
None of the tracked axis os 2024 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which axis os 2024 CVE should I patch first?
CVE-2025-0324 currently ranks highest (47/100): The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to g.