CVE-2025-5454

Published: Nov 11, 2025Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

Affected (1)

Products: Axis: Axis Os

Axis

1 product

Axis Os

Configuration A

1 vulnerable · 232 platform

Vulnerable Software	Affected Versions
Axis Axis Os	From 12.0.0 to 12.6.18

Running on/with	Platform Versions
Axis A1210 ( B)	All versions
Axis A1214	All versions
Axis A1601	All versions
Axis A1610 ( B)	All versions
Axis A1710 B	All versions
Axis A1810 B	All versions
Axis A8207 Ve Mk Ii	All versions
Axis C1110 E	All versions
Axis C1111 E	All versions
Axis C1210 E	All versions
Axis C1211 E	All versions
Axis C1310 E Mk Ii	All versions
Axis C1410 Mk Ii	All versions
Axis C1510	All versions
Axis C1511	All versions
Axis C1610 Ve	All versions
Axis C1710	All versions
Axis C1720	All versions
Axis C6110	All versions
Axis C8110	All versions
Axis C8210	All versions
Axis D1110	All versions
Axis D201 S Xpt Q6075	All versions
Axis D2110 Ve	All versions
Axis D2210 Ve	All versions
Axis D3110 Mk Ii	All versions
Axis D4100 Ve Mk Ii	All versions
Axis D4200 Ve	All versions
Axis D6310	All versions
Axis Excam Xf Q1785	All versions
Axis Excam Xpt Q6075	All versions
Axis F9104 B Main Unit	All versions
Axis F9104 B Mk Ii Main Unit	All versions
Axis F9111 R Mk Ii Main Unit	All versions
Axis F9111 Main Unit	All versions
Axis F9111 Mk Ii Main Unit	All versions
Axis F9114 B R Mk Ii Main Unit	All versions
Axis F9114 B Main Unit	All versions
Axis F9114 Bt	All versions
Axis F9114 Main Unit	All versions
Axis Fa51	All versions
Axis Fa51 B	All versions
Axis Fa54	All versions
Axis I7010 Safety	All versions
Axis I7010 Ve	All versions
Axis I7020	All versions
Axis I8016 Lve	All versions
Axis I8116 E	All versions
Axis I8307 Ve	All versions
Axis M1055 L	All versions
Axis M1075 L	All versions
Axis M1135	All versions
Axis M1135 E Mk Ii	All versions
Axis M1137	All versions
Axis M1137 E Mk Ii	All versions
Axis M2035 Le	All versions
Axis M2036 Le	All versions
Axis M3057 Plr Mk Ii	All versions
Axis M3085 V	All versions
Axis M3086 V	All versions
Axis M3086 V Mic	All versions
Axis M3088 V	All versions
Axis M3125 Lve	All versions
Axis M3126 Lve	All versions
Axis M3128 Lve	All versions
Axis M3215 Lve	All versions
Axis M3216 Lve	All versions
Axis M3905 R	All versions
Axis M4215 Lv	All versions
Axis M4215 V	All versions
Axis M4216 Lv	All versions
Axis M4216 V	All versions
Axis M4218 Lv	All versions
Axis M4218 V	All versions
Axis M4225 Lve	All versions
Axis M4227 Lve	All versions
Axis M4228 Lve	All versions
Axis M4308 Ple	All versions
Axis M4317 Plr	All versions
Axis M4317 Plve	All versions
Axis M4318 Plr	All versions
Axis M4318 Plve	All versions
Axis M4327 P	All versions
Axis M4328 P	All versions
Axis M5000	All versions
Axis M5000 G	All versions
Axis M5074	All versions
Axis M5075	All versions
Axis M5075 G	All versions
Axis M5526 E	All versions
Axis M7104	All versions
Axis M7116	All versions
Axis P1245 Mk Ii	All versions
Axis P1265 Mk Ii	All versions
Axis P1275 Mk Ii	All versions
Axis P1385	All versions
Axis P1385 B	All versions
Axis P1385 Be	All versions
Axis P1385 E	All versions
Axis P1387	All versions
Axis P1387 B	All versions
Axis P1387 Be	All versions
Axis P1387 Le	All versions
Axis P1388	All versions
Axis P1388 B	All versions
Axis P1388 Be	All versions
Axis P1388 Le	All versions
Axis P1465 Le	All versions
Axis P1465 Le 3	All versions
Axis P1467 Le	All versions
Axis P1468 Le	All versions
Axis P1468 Xle	All versions
Axis P1475 Le	All versions
Axis P1518 E	All versions
Axis P1518 Le	All versions
Axis P3265 Lv	All versions
Axis P3265 Lve	All versions
Axis P3265 Lve 3	All versions
Axis P3265 V	All versions
Axis P3267 Lv	All versions
Axis P3267 Lve	All versions
Axis P3267 Lve Mic	All versions
Axis P3268 Lv	All versions
Axis P3268 Lve	All versions
Axis P3268 Slve	All versions
Axis P3275 Lv	All versions
Axis P3275 Lve	All versions
Axis P3277 Lv	All versions
Axis P3277 Lve	All versions
Axis P3278 Lv	All versions
Axis P3278 Lve	All versions
Axis P3285 Lv	All versions
Axis P3285 Lve	All versions
Axis P3287 Lv	All versions
Axis P3287 Lve	All versions
Axis P3288 Lv	All versions
Axis P3288 Lve	All versions
Axis P3735 Ple	All versions
Axis P3737 Ple	All versions
Axis P3738 Ple	All versions
Axis P3747 Plve	All versions
Axis P3748 Plve	All versions
Axis P3818 Pve	All versions
Axis P3827 Pve	All versions
Axis P3905 R Mk Iii	All versions
Axis P3925 Lre	All versions
Axis P3925 R	All versions
Axis P3935 Lr	All versions
Axis P4705 Plve	All versions
Axis P4707 Plve	All versions
Axis P4708 Plve	All versions
Axis P5654 E	All versions
Axis P5654 E Mk Ii	All versions
Axis P5655 E	All versions
Axis P5676 Le	All versions
Axis P7304	All versions
Axis P7316	All versions
Axis P9117 Pv	All versions
Axis Q1615 Le Mk Iii	All versions
Axis Q1615 Mk Iii	All versions
Axis Q1656	All versions
Axis Q1656 B	All versions
Axis Q1656 Be	All versions
Axis Q1656 Ble	All versions
Axis Q1656 Dle	All versions
Axis Q1656 Le	All versions
Axis Q1686 Dle	All versions
Axis Q1715	All versions
Axis Q1728	All versions
Axis Q1728 Le	All versions
Axis Q1798 Le	All versions
Axis Q1800 Le	All versions
Axis Q1800 Le 3	All versions
Axis Q1805 Le	All versions
Axis Q1806 Le	All versions
Axis Q1808 Le	All versions
Axis Q1809 Le	All versions
Axis Q1961 Te	All versions
Axis Q1961 Xte	All versions
Axis Q1971 E	All versions
Axis Q1972 E	All versions
Axis Q2101 Te	All versions
Axis Q2111 E	All versions
Axis Q2112 E	All versions
Axis Q3536 Lve	All versions
Axis Q3538 Lve	All versions
Axis Q3538 Slve	All versions
Axis Q3546 Lve	All versions
Axis Q3548 Lve	All versions
Axis Q3556 Lve	All versions
Axis Q3558 Lve	All versions
Axis Q3626 Ve	All versions
Axis Q3628 Ve	All versions
Axis Q3819 Pve	All versions
Axis Q3839 Pve	All versions
Axis Q3839 Spve	All versions
Axis Q4809 Pve	All versions
Axis Q6020 E	All versions
Axis Q6074	All versions
Axis Q6074 E	All versions
Axis Q6075	All versions
Axis Q6075 E	All versions
Axis Q6075 S	All versions
Axis Q6075 Se	All versions
Axis Q6078 E	All versions
Axis Q6135 Le	All versions
Axis Q6225 Le	All versions
Axis Q6300 E	All versions
Axis Q6315 Le	All versions
Axis Q6318 Le	All versions
Axis Q6355 Le	All versions
Axis Q6358 Le	All versions
Axis Q8615 E	All versions
Axis Q8752 E	All versions
Axis Q8752 E Mk Ii	All versions
Axis Q9307 Lv	All versions
Axis S3008	All versions
Axis S3008 Mk Ii	All versions
Axis S3016	All versions
Axis S4000	All versions
Axis V5925	All versions
Axis V5938	All versions
Axis W100	All versions
Axis W101	All versions
Axis W102	All versions
Axis W110	All versions
Axis W120	All versions
Axis W401	All versions
Axis Xc1311	All versions
Axis Xf40 Q1785	All versions
Axis Xfq1656	All versions
Axis Xpq1785	All versions

Related CWEs

CWE-35

Path Traversal: '.../...//'

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.

References (1)

https://www.axis.com/dam/public/48/ab/82/cve-2025-5454pdf-en-US-504213.pdf

Source: product-security@axis.com

Vendor Advisory

Timeline

No history available yet.