CVE-2025-7622 - During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticated attacker to access internal resources on the server was discovered

Back Back to CVE browser

MEDIUM

During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticated attacker to access internal resources on the server was discovered

Published Aug 12, 2025

5.1

MEDIUM

CVSS 4.0

EPSS 0.17%

Description

During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticated attacker to access internal resources on the server was discovered.

Affected products

Vendor Axis Communications AB Product AXIS Camera Station Default
unaffected
- Version
  5.32
  Status
  affected
  Constraints
  <5.59
Vendor Axis Communications AB Product AXIS Camera Station Pro Default
unaffected
- Version
  6
  Status
  affected
  Constraints
  <6.10

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Axis Communications AB

AXIS Camera Station

unaffected

Version	Status	Constraints
5.32	affected	<5.59

Axis Communications AB

AXIS Camera Station Pro

unaffected

Version	Status	Constraints
6	affected	<6.10

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24223
Advisory
https://www.axis.com/dam/public/c5/9a/3c/cve-2025-7622pdf-en-US-492761.pdf
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24223		Advisory
https://www.axis.com/dam/public/c5/9a/3c/cve-2025-7622pdf-en-US-492761.pdf		Vendor Advisory