CVE-2025-9524 | Axis AXIS OS prior 12.7.11 VAPIX API port.cgi improper validation of specified type of input

A vulnerability, which was classified as problematic, has been found in Axis AXIS OS up to 8.40.88/9.80.122/10.12.304/11.11.176/12.7.10. This vulnerability affects unknown code of the file port.cgi of the component VAPIX API. The manipulation leads to improper validation of specified type of input.

This vulnerability is traded as CVE-2025-9524. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.