What is the CVSS score of CVE-2025-11547?

CVE-2025-11547 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Camera Station Pro are affected by CVE-2025-11547?

AXIS CameraStation Pro contains a privilege escalation vulnerability (CVE-2025-11547) that allows unauthorized users to gain administrative access to the surveillance system.

How to fix or mitigate CVE-2025-11547?

Within 24 hours: Identify all AXIS Camera Station Pro installations and their versions; restrict network access to the application to trusted administrative networks only. Within 7 days: Implement enhanced monitoring for privilege escalation attempts and unauthorized account activity; contact AXIS for patch availability and timeline. Within 30 days: Deploy patched version immediately upon release; conduct access review to revoke unnecessary user permissions; perform forensic analysis to detect unauthorized administrative access.

Camera Station Pro CVE-2025-11547

HIGH

Insertion of Sensitive Information into Log File (CWE-532)

2026-02-10 product-security@axis.com

Privilege Escalation Camera Station Pro

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 10, 2026 - 06:15 nvd

HIGH 7.8

DescriptionCVE.org

AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user.

AnalysisAI

AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user. [CVSS 7.8 HIGH]

Technical ContextAI

Classified as CWE-532 (Insertion of Sensitive Information into Log File). Affects Camera Station Pro. AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user.