How to fix EUVD-2025-16622?

Within 24 hours: Inventory all VAPIX-enabled devices and assess exposure; restrict network access to affected devices to trusted networks only. Within 7 days: Disable VAPIX Device Configuration features if operationally feasible; implement enhanced monitoring and access controls for device administration interfaces. Within 30 days: Establish a patch management plan with the vendor; evaluate device replacement or upgrade timelines; conduct security assessment of potentially compromised devices.

Is Axis Os 2024 affected by EUVD-2025-16622?

A critical privilege escalation vulnerability in VAPIX Device Configuration allows unauthorized users to gain administrator access to affected systems.

EUVD-2025-16622

| CVE-2025-0324 CRITICAL

2025-06-02 [email protected]

9.4

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 16:47 euvd

EUVD-2025-16622

Analysis Generated

Mar 14, 2026 - 16:47 vuln.today

CVE Published

Jun 02, 2025 - 08:15 nvd

CRITICAL 9.4

Description

The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.

Analysis

Privilege escalation in Axis VAPIX framework.

Technical Context

CWE-791.

Affected Products

['Axis VAPIX']

Remediation

Apply firmware update.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.1

CVSS: +47

POC: 0

EUVD-2025-16622 vulnerability details – vuln.today

Back

EUVD-2025-16622

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

EUVD-2025-16622

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

External POC / Exploit Code