The VAPIX SIP configuration API has an input validation flaw that could allow privilege escalation. Exploitation requires prior authentication with an admin-privileged service account. The vulnerability has a CVSS score of 6.7, indicating a medium severity level.