PT-2025-46305 · Axis · Axis

51L3Nc3 · Publicado 2025-11-11 · Atualizado 2025-11-24 · CVE-2025-5454

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Axis (affected versions not specified)

Description An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This issue can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces a victim to install a malicious ACAP application. A path traversal attack involves manipulating file paths to access restricted directories or files. Privilege escalation refers to gaining unauthorized access to higher-level system privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Enumeração de Fraquezas

CWE-35

Identificadores relacionados

CVE-2025-5454

Produtos afetados

Axis

Referências · 7

• https://twitter.com/CVEnew/status/1988143831519306166 · Publicação no Twitter
• https://t.me/CVEtracker/37007 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-5454 · Nota de Segurança
• https://t.me/cveNotify/143852 · Publicação no Telegram
• https://t.me/cveNotify/142381 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-5454 · Aviso do Fabricante
• https://axis.com/dam/public/48/ab/82/cve-2025-5454pdf-en-US-504213.pdf · Aviso do Fabricante