Read the docs
TI-2025-04899 Aliases CVE-2025-5452GHSA-5ww9-v6r8-v66v

A malicious ACAP application can gain access to admin-level service account credentials…

Priority LOW 31CWE-214Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the malicious ACAP application. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00314 24th percentileScored 2026-11-07
Fix Fixed AXIS OS (Axis Communications AB): 12.6.69

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Axis Communications ABAXIS OS12.0.0 to before 12.6.6912.6.69Patch availableCNA

CPE configurations NVD · 233

CPEVersionsRoleVendor
cpe:2.3:o:axis:axis_os:*:*:*:*:active:*:*:*12.0.0 to before 12.6.69VulnerableAxis Communications AB
cpe:2.3:h:axis:a1210_\(-b\):-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:a1214:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:a1601:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:a1610_\(-b\):-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:a1710-b:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:a1810-b:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:a8207-ve_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:c1110-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:c1111-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
Show 223 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:axis:c1210-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:c1211-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:c1310-e_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:c1410_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:c1510:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:c1511:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:c1610-ve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:c1710:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:c1720:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:c6110:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:c8110:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:c8210:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:d1110:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:d201-s_xpt_q6075:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:d2110-ve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:d2210-ve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:d3110_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:d4100-ve_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:d4200-ve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:d6310:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:excam_xf_q1785:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:excam_xpt_q6075:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:f9104-b_main_unit:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:f9104-b_mk_ii_main_unit:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:f9111-r_mk_ii_main_unit:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:f9111_main_unit:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:f9111_mk_ii_main_unit:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:f9114-b-r_mk_ii_main_unit:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:f9114-b_main_unit:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:f9114-bt:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:f9114_main_unit:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:fa51:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:fa51-b:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:fa54:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:i7010-safety:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:i7010-ve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:i7020:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:i8016-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:i8116-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:i8307-ve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m1055-l:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m1075-l:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m1135:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m1135-e_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m1137:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m1137-e_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m2035-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m2036-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m3057-plr_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m3085-v:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m3086-v:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m3086-v_mic:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m3088-v:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m3125-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m3126-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m3128-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m3215-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m3216-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m3905-r:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4215-lv:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4215-v:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4216-lv:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4216-v:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4218-lv:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4218-v:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4225-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4227-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4228-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4308-ple:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4317-plr:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4317-plve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4318-plr:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4318-plve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4327-p:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m4328-p:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m5000:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m5000-g:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m5074:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m5075:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m5075-g:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m5526-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m7104:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:m7116:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1245_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1265_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1275_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1385:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1385-b:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1385-be:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1385-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1387:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1387-b:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1387-be:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1387-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1388:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1388-b:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1388-be:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1388-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1465-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1465-le-3:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1467-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1468-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1468-xle:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1475-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1518-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p1518-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3265-lv:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3265-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3265-lve-3:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3265-v:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3267-lv:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3267-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3267-lve_mic:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3268-lv:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3268-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3268-slve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3275-lv:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3275-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3277-lv:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3277-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3278-lv:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3278-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3285-lv:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3285-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3287-lv:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3287-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3288-lv:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3288-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3735-ple:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3737-ple:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3738-ple:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3747-plve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3748-plve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3818-pve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3827-pve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3905-r_mk_iii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3925-lre:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3925-r:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p3935-lr:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p4705-plve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p4707-plve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p4708-plve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p5654-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p5654-e_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p5655-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p5676-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p7304:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p7316:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:p9117-pv:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1615-le_mk_iii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1615_mk_iii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1656:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1656-b:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1656-be:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1656-ble:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1656-dle:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1656-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1686-dle:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1715:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1728:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1728-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1798-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1800-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1800-le-3:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1805-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1806-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1808-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1809-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1961-te:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1961-xte:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1971-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q1972-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q2101-te:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q2111-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q2112-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q3536-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q3538-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q3538-slve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q3546-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q3548-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q3556-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q3558-lve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q3626-ve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q3628-ve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q3819-pve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q3839-pve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q3839-spve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q4809-pve:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6020-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6074:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6074-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6075:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6075-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6075-s:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6075-se:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6078-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6135-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6225-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6300-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6315-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6318-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6355-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q6358-le:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q8615-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q8752-e:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q8752-e_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:q9307-lv:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:s3008:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:s3008_mk_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:s3016:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:s4000:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:v5925:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:v5938:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:w100:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:w101:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:w102:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:w110:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:w120:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:w401:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:xc1311:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:xf40-q1785:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:xfq1656:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB
cpe:2.3:h:axis:xpq1785:-:*:*:*:*:*:*:*not specified by NVDRunning onAxis Communications AB

Remediation

  • Fix · CNA AXIS OS (Axis Communications AB) Fixed in 12.6.69

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-5452
  2. 2026-10-03 Alias added: GHSA-5ww9-v6r8-v66v

References

  • TI-2023-07814 Remote code execution vulnerability during the installation of ACAP applications on the Axis device CVSS 3.1CRITICAL 9.1
  • TI-2025-00260 The VAPIX Device Configuration framework allowed a privilege escalation, enabling a… CVSS 3.1CRITICAL 9.4
  • TI-2025-10210 OS command injection in AXIS OS CVSS 3.1HIGH 8.8
  • TI-2023-05336 Insufficient input validation in VAPIX API create_overlay.cgi CVSS 3.1HIGH 8.8
  • TI-2025-00291 Improper privilege management in AXIS OS CVSS 3.1HIGH 8.8
  • TI-2021-11974 Injection in AXIS OS CVSS 3.1HIGH 8.8
See all 35 →

Sources