axis-RCE

CVE-2025-30026 + CVE-2025-30023: Unauth RCE This exploit chains CVE‑2025‑30026 Authentication bypass with CVE‑2025‑30023 Insecure deserialization to achieve unauthenticated RCE on Axis Camera Station software. It bypasses the login mechanism and delivers malicious serialized payloads that trigger...

AXIS Camera Station Pro Versions Before 6.20 Database Backup Decryption

AXIS Camera Station Pro versions before 6.20 and AXIS Camera Station 5 contain an insufficient database-backup encryption scheme that permits offline decryption of stored secrets. This proof of concept derives the AES key from a volume serial and decrypts encrypted values...

CVE-2026-63286

Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro automatically creates one more such backup for recovery purpose when the update is applied. Delete all these backups and change the...

CVE-2026-63286

Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro automatically creates one more such backup for recovery purpose when the update is applied. Delete all these backups and change the...

CVE-2026-63286

The AXIS Camera Station Pro software is impacted by a vulnerability where database backups are susceptible to offline attacks . This occurs because backups created on versions prior to the patch remain vulnerable. When an update is applied, the system automatically generates one additional backup...

EUVD-2026-111816

Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro automatically creates one more such backup for recovery purpose when the update is applied. Delete all these backups and change the...

PT-2026-127888

Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro automatically creates one more such backup for recovery purpose when the update is applied. Delete all these backups and change the...

AXIS Camera Station Pro encryption issue vulnerability

Versions 6.0 through 6.19 of AXIS Camera Station Pro, as well as version 5.00 and later of AXIS Camera Station, contain an encryption vulnerability. This vulnerability stems from insufficient encryption strength in database backups, making them susceptible to offline attacks that could lead to...

CVE-2026-63286: Axis Communications AB: Database backups are vulnerable to offline attacks

Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro automatically creates one more such backup for recovery purpose when the update is applied. Delete all these backups and change the...

...[ More ]

This Python utility recovers AES-256-encrypted credentials associated with AXIS Camera Station using cryptographic keys derived from Windows volume serial numbers. It implements HMAC-SHA1, PBKDF2-SHA1, and AES-256-CBC decryption, supporting both known volume serial numbers and exhaustive searches...

...[ More ]

This Python proof-of-concept targets AXIS Camera Station through its Axis.Remoting communication interface, using a crafted .NET deserialization payload to achieve remote code execution. The exploit implements the application's encrypted communication protocol, including RSA certificate exchange,...

CVE-2025-12757

An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are not permitted to...

CVE-2025-12757

An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are not permitted to...

CVE-2025-12757

An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are not permitted to...

CVE-2025-12757

The CVE-2025-12757 entry concerns Axis Camera Station Pro where a feature allows a non-admin user to view information they are not permitted to access. Metrics show CVSS 3.1 base score 4.6 (Medium), with an Adjacent attack vector, Low privileges required, No user interaction, and Confidentiality/...

CVE-2025-11547

AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user...

CVE-2025-11547

AXIS Camera Station Pro is affected by a local-privilege-escalation vulnerability where a non-admin user can escalate privileges on the server. The issue, as described, has a HIGH impact on confidentiality, integrity, and availability, with CVSS 3.1 metrics indicating local attack, low complexity...

CVE-2025-11547

AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user...

PT-2026-7229

Name of the Vulnerable Software and Affected Versions AXIS Camera Station Pro affected versions not specified Description AXIS Camera Station Pro contains a flaw that allows a non-administrative user to perform a privilege escalation attack on the server. Recommendations At the moment, there is n...

CVE-2025-11547: Insertion of Sensitive Information into Log File

AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user...