Axis Camera Server Vulnerabilities Exposes Thousands of Organizations to Attack

Claroty researchers disclosed four critical flaws in Axis Communications’ Axis.Remoting protocol affecting Axis Camera Station and Axis Device Manager; issues include an authentication-bypass fallback endpoint, unsafe JSON deserialization enabling pre-auth remote code execution, a MiTM vulnerability that exposes cleartext credentials, and a local privilege escalation — together these can grant attackers NT AUTHORITY\SYSTEM on camera management servers and potentially impact thousands of organizations worldwide.