1892 matches found
CVE-2025-5452
Axis devices running ACAP with unsigned app installation enabled are reported to be vulnerable to a malicious ACAP application that can obtain admin-level service account credentials used by legitimate ACAP apps, potentially enabling privilege escalation. Exploitation requires convincing a user t...
CVE-2025-5452
A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the malicious ACAP application. This vulnerability can only be exploited if the Axis device is configured to allow the...
CVE-2025-5452
A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the malicious ACAP application. This vulnerability can only be exploited if the Axis device is configured to allow the...
CVE-2025-6298
ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim ...
CVE-2025-5718
The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP...
CVE-2025-5718
The CVE-2025-5718 issue concerns the Axis ACAP Application framework on Axis OS devices. It describes a privilege-escalation vulnerability via a symbolic-link (symlink) attack, exploitable only if the device is configured to allow unsigned ACAP applications and an attacker persuades a user to ins...
CVE-2025-5454
Axis ACAP path-traversal vulnerability (CVE-2025-5454) affects Axis OS/ACAP configuration handling on Axis devices. The issue arises from insufficient input validation in ACAP configuration files, enabling potential local path traversal andPrivilege escalation when an Axis device is configured to...
CVE-2025-5454
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker...
CVE-2025-4645
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...
CVE-2025-4645
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...
AXIS OS 安全漏洞
AXIS OS is an edge device operating system from Axis Sweden. AXIS OS suffers from a security vulnerability that stems from a third-party component exposing passwords in process parameters, which can be exploited by an attacker to cause low-privilege user access...
PT-2025-46306
Name of the Vulnerable Software and Affected Versions Axis ACAP Application framework affected versions not specified Description The ACAP Application framework may allow for privilege escalation through a symlink attack. Exploitation requires the Axis device to be configured to permit the...
PT-2025-46303
Name of the Vulnerable Software and Affected Versions Axis affected versions not specified Description An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This issue is exploitable if the Axis device is configured to allow the installatio...
CVE-2025-6779: Incorrect Permission Assignment for Critical Resource
An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces th...
AXIS OS 安全漏洞
AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that originates from a malicious ACAP application that can obtain administrator-level service account credentials used by a legitimate ACAP application, potentially resulting in elevated privileges f...
CVE-2025-8108: Improper Validation of Specified Type of Input
An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the...
AXIS OS 安全漏洞
AXIS OS is an edge device operating system from Swedish company Axis AXIS. AXIS OS has a security vulnerability that stems from improper configuration file permissions and insufficient input validation, which could lead to elevated privileges...
CVE-2025-4645: Improper Validation of Specified Type of Input
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...
PT-2025-46302
Name of the Vulnerable Software and Affected Versions AXIS Optimizer affected versions not specified Description AXIS Optimizer is susceptible to an unquoted search path issue that could allow for privilege escalation on Microsoft Windows systems. Exploitation requires local access to a Windows...