CVE-2025-5452: Axis Os: güvenlik açığı

Açıklama (NVD)

A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the malicious ACAP application. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

Özet bilgiler

Ürün

Axis Axis Os

CVSS v3.1

6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,31 (yüzdelik 24)

CWE

CWE-214

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• www.axis.com
• CWE-214