What is the CVSS score of CVE-2025-30024?

CVE-2025-30024 has a CVSS 3.1 base score of 6.8 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Device Manager are affected by CVE-2025-30024?

CVE-2025-30024 presents notable security risk rated CVSS 6.8. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2025-30024?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Device Manager CVE-2025-30024

EUVD-2025-21111 MEDIUM

Improper Certificate Validation (CWE-295)

2025-07-11 product-security@axis.com

Information Disclosure Device Manager

6.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

5.32

EUVD ID Assigned

Mar 16, 2026 - 08:17 euvd

EUVD-2025-21111

Analysis Generated

Mar 16, 2026 - 08:17 vuln.today

CVE Published

Jul 11, 2025 - 06:15 nvd

MEDIUM 6.8

DescriptionCVE.org

The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack.

Analysis

The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack.

Technical ContextAI

This vulnerability is classified as Improper Certificate Validation (CWE-295).

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

More in Device Manager

View all

CVE-2023-50916 HIGH This Week POC

7.2 Jan 10

Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted ch

CVE-2017-9294 CRITICAL Act Now

9.8 May 29

RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to execute internal commands without

CVE-2025-30023 CRITICAL Act Now

9.0 Jul 11

CVE-2025-30023 is a critical remote code execution vulnerability in a client-server communication protocol that allows a

CVE-2023-34143 HIGH This Week

8.1 Jul 18

Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux (Device

CVE-2025-30025 HIGH This Week

7.8 Jul 11

CVE-2025-30025 is a local privilege escalation vulnerability in the inter-process communication (IPC) protocol between a

CVE-2018-11748 HIGH This Week

7.8 Oct 02

Previous releases of the Puppet device_manager module creates configuration files containing credentials that are world

CVE-2023-34142 HIGH This Week

7.5 Jul 18

Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manage

CVE-2019-17360 HIGH This Week

7.5 Nov 12

A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.7.0-00 allows an unauthenticated remote user to trigger a

CVE-2018-14735 HIGH This Week

7.5 Aug 09

An Information Exposure issue was discovered in Hitachi Command Suite 8.5.3. Rated high severity (CVSS 7.5), this vulner

CVE-2017-9295 MEDIUM This Month

6.5 May 29

XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authe

CVE-2017-9297 MEDIUM This Month

6.1 May 29

Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to redirect users to arbit

CVE-2017-9296 MEDIUM This Month

6.1 May 29

Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Tuning Manager before 8.5.2-00 allows

Same weakness CWE-295 – Improper Certificate Validation

View all

CVE-2015-3152 MEDIUM POC

5.9

CVE-2017-2800 CRITICAL POC

9.8

CVE-2014-1266 HIGH POC

7.4

CVE-2022-47758 CRITICAL POC

9.8

CVE-2025-68121 CRITICAL POC

10.0

CVE-2025-29331 CRITICAL POC

9.8

CVE-2025-32878 CRITICAL POC

9.8

CVE-2024-3738 CRITICAL POC

9.8

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2025-30024 vulnerability details – vuln.today

Back

Device Manager CVE-2025-30024

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

More in Device Manager

Same weakness CWE-295 – Improper Certificate Validation

Same technique Information Disclosure

Share

External POC / Exploit Code