CVE-2025-5454

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2025-5454
StatePUBLISHED
AssignerAxis
Source PriorityCVE Program / NVD first with legacy fallback
Published2025-11-11 07:15:34 UTC
Updated2026-10-07 21:10:00 UTC
DescriptionAn ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

Risk And Classification

Primary CVSS: v3.1 6.7 MEDIUM from [email protected]

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.001530000 probability, percentile 0.038600000 (date 2026-10-07)

Problem Types: CWE-35 | CWE-35 CWE-35: Path Traversal: '.../...//'

VersionSourceTypeScoreSeverityVector
3.1[email protected]Primary6.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
3.1[email protected]Secondary6.4MEDIUMCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
3.1CNACVSS6.4MEDIUMCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 Breakdown

Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Hardware Axis A1210 -b - All All All
Hardware Axis A1214 - All All All
Hardware Axis A1601 - All All All
Hardware Axis A1610 -b - All All All
Hardware Axis A1710-b - All All All
Hardware Axis A1810-b - All All All
Hardware Axis A8207-ve Mk Ii - All All All
Operating System Axis Axis Os All All All All
Hardware Axis C1110-e - All All All
Hardware Axis C1111-e - All All All
Hardware Axis C1210-e - All All All
Hardware Axis C1211-e - All All All
Hardware Axis C1310-e Mk Ii - All All All
Hardware Axis C1410 Mk Ii - All All All
Hardware Axis C1510 - All All All
Hardware Axis C1511 - All All All
Hardware Axis C1610-ve - All All All
Hardware Axis C1710 - All All All
Hardware Axis C1720 - All All All
Hardware Axis C6110 - All All All
Hardware Axis C8110 - All All All
Hardware Axis C8210 - All All All
Hardware Axis D1110 - All All All
Hardware Axis D201-s Xpt Q6075 - All All All
Hardware Axis D2110-ve - All All All
Hardware Axis D2210-ve - All All All
Hardware Axis D3110 Mk Ii - All All All
Hardware Axis D4100-ve Mk Ii - All All All
Hardware Axis D4200-ve - All All All
Hardware Axis D6310 - All All All
Hardware Axis Excam Xf Q1785 - All All All
Hardware Axis Excam Xpt Q6075 - All All All
Hardware Axis F9104-b Main Unit - All All All
Hardware Axis F9104-b Mk Ii Main Unit - All All All
Hardware Axis F9111-r Mk Ii Main Unit - All All All
Hardware Axis F9111 Main Unit - All All All
Hardware Axis F9111 Mk Ii Main Unit - All All All
Hardware Axis F9114-b-r Mk Ii Main Unit - All All All
Hardware Axis F9114-bt - All All All
Hardware Axis F9114-b Main Unit - All All All
Hardware Axis F9114 Main Unit - All All All
Hardware Axis Fa51 - All All All
Hardware Axis Fa51-b - All All All
Hardware Axis Fa54 - All All All
Hardware Axis I7010-safety - All All All
Hardware Axis I7010-ve - All All All
Hardware Axis I7020 - All All All
Hardware Axis I8016-lve - All All All
Hardware Axis I8116-e - All All All
Hardware Axis I8307-ve - All All All
Hardware Axis M1055-l - All All All
Hardware Axis M1075-l - All All All
Hardware Axis M1135 - All All All
Hardware Axis M1135-e Mk Ii - All All All
Hardware Axis M1137 - All All All
Hardware Axis M1137-e Mk Ii - All All All
Hardware Axis M2035-le - All All All
Hardware Axis M2036-le - All All All
Hardware Axis M3057-plr Mk Ii - All All All
Hardware Axis M3085-v - All All All
Hardware Axis M3086-v - All All All
Hardware Axis M3086-v Mic - All All All
Hardware Axis M3088-v - All All All
Hardware Axis M3125-lve - All All All
Hardware Axis M3126-lve - All All All
Hardware Axis M3128-lve - All All All
Hardware Axis M3215-lve - All All All
Hardware Axis M3216-lve - All All All
Hardware Axis M3905-r - All All All
Hardware Axis M4215-lv - All All All
Hardware Axis M4215-v - All All All
Hardware Axis M4216-lv - All All All
Hardware Axis M4216-v - All All All
Hardware Axis M4218-lv - All All All
Hardware Axis M4218-v - All All All
Hardware Axis M4225-lve - All All All
Hardware Axis M4227-lve - All All All
Hardware Axis M4228-lve - All All All
Hardware Axis M4308-ple - All All All
Hardware Axis M4317-plr - All All All
Hardware Axis M4317-plve - All All All
Hardware Axis M4318-plr - All All All
Hardware Axis M4318-plve - All All All
Hardware Axis M4327-p - All All All
Hardware Axis M4328-p - All All All
Hardware Axis M5000 - All All All
Hardware Axis M5000-g - All All All
Hardware Axis M5074 - All All All
Hardware Axis M5075 - All All All
Hardware Axis M5075-g - All All All
Hardware Axis M5526-e - All All All
Hardware Axis M7104 - All All All
Hardware Axis M7116 - All All All
Hardware Axis P1245 Mk Ii - All All All
Hardware Axis P1265 Mk Ii - All All All
Hardware Axis P1275 Mk Ii - All All All
Hardware Axis P1385 - All All All
Hardware Axis P1385-b - All All All
Hardware Axis P1385-be - All All All
Hardware Axis P1385-e - All All All
Hardware Axis P1387 - All All All
Hardware Axis P1387-b - All All All
Hardware Axis P1387-be - All All All
Hardware Axis P1387-le - All All All
Hardware Axis P1388 - All All All
Hardware Axis P1388-b - All All All
Hardware Axis P1388-be - All All All
Hardware Axis P1388-le - All All All
Hardware Axis P1465-le - All All All
Hardware Axis P1465-le-3 - All All All
Hardware Axis P1467-le - All All All
Hardware Axis P1468-le - All All All
Hardware Axis P1468-xle - All All All
Hardware Axis P1475-le - All All All
Hardware Axis P1518-e - All All All
Hardware Axis P1518-le - All All All
Hardware Axis P3265-lv - All All All
Hardware Axis P3265-lve - All All All
Hardware Axis P3265-lve-3 - All All All
Hardware Axis P3265-v - All All All
Hardware Axis P3267-lv - All All All
Hardware Axis P3267-lve - All All All
Hardware Axis P3267-lve Mic - All All All
Hardware Axis P3268-lv - All All All
Hardware Axis P3268-lve - All All All
Hardware Axis P3268-slve - All All All
Hardware Axis P3275-lv - All All All
Hardware Axis P3275-lve - All All All
Hardware Axis P3277-lv - All All All
Hardware Axis P3277-lve - All All All
Hardware Axis P3278-lv - All All All
Hardware Axis P3278-lve - All All All
Hardware Axis P3285-lv - All All All
Hardware Axis P3285-lve - All All All
Hardware Axis P3287-lv - All All All
Hardware Axis P3287-lve - All All All
Hardware Axis P3288-lv - All All All
Hardware Axis P3288-lve - All All All
Hardware Axis P3735-ple - All All All
Hardware Axis P3737-ple - All All All
Hardware Axis P3738-ple - All All All
Hardware Axis P3747-plve - All All All
Hardware Axis P3748-plve - All All All
Hardware Axis P3818-pve - All All All
Hardware Axis P3827-pve - All All All
Hardware Axis P3905-r Mk Iii - All All All
Hardware Axis P3925-lre - All All All
Hardware Axis P3925-r - All All All
Hardware Axis P3935-lr - All All All
Hardware Axis P4705-plve - All All All
Hardware Axis P4707-plve - All All All
Hardware Axis P4708-plve - All All All
Hardware Axis P5654-e - All All All
Hardware Axis P5654-e Mk Ii - All All All
Hardware Axis P5655-e - All All All
Hardware Axis P5676-le - All All All
Hardware Axis P7304 - All All All
Hardware Axis P7316 - All All All
Hardware Axis P9117-pv - All All All
Hardware Axis Q1615-le Mk Iii - All All All
Hardware Axis Q1615 Mk Iii - All All All
Hardware Axis Q1656 - All All All
Hardware Axis Q1656-b - All All All
Hardware Axis Q1656-be - All All All
Hardware Axis Q1656-ble - All All All
Hardware Axis Q1656-dle - All All All
Hardware Axis Q1656-le - All All All
Hardware Axis Q1686-dle - All All All
Hardware Axis Q1715 - All All All
Hardware Axis Q1728 - All All All
Hardware Axis Q1728-le - All All All
Hardware Axis Q1798-le - All All All
Hardware Axis Q1800-le - All All All
Hardware Axis Q1800-le-3 - All All All
Hardware Axis Q1805-le - All All All
Hardware Axis Q1806-le - All All All
Hardware Axis Q1808-le - All All All
Hardware Axis Q1809-le - All All All
Hardware Axis Q1961-te - All All All
Hardware Axis Q1961-xte - All All All
Hardware Axis Q1971-e - All All All
Hardware Axis Q1972-e - All All All
Hardware Axis Q2101-te - All All All
Hardware Axis Q2111-e - All All All
Hardware Axis Q2112-e - All All All
Hardware Axis Q3536-lve - All All All
Hardware Axis Q3538-lve - All All All
Hardware Axis Q3538-slve - All All All
Hardware Axis Q3546-lve - All All All
Hardware Axis Q3548-lve - All All All
Hardware Axis Q3556-lve - All All All
Hardware Axis Q3558-lve - All All All
Hardware Axis Q3626-ve - All All All
Hardware Axis Q3628-ve - All All All
Hardware Axis Q3819-pve - All All All
Hardware Axis Q3839-pve - All All All
Hardware Axis Q3839-spve - All All All
Hardware Axis Q4809-pve - All All All
Hardware Axis Q6020-e - All All All
Hardware Axis Q6074 - All All All
Hardware Axis Q6074-e - All All All
Hardware Axis Q6075 - All All All
Hardware Axis Q6075-e - All All All
Hardware Axis Q6075-s - All All All
Hardware Axis Q6075-se - All All All
Hardware Axis Q6078-e - All All All
Hardware Axis Q6135-le - All All All
Hardware Axis Q6225-le - All All All
Hardware Axis Q6300-e - All All All
Hardware Axis Q6315-le - All All All
Hardware Axis Q6318-le - All All All
Hardware Axis Q6355-le - All All All
Hardware Axis Q6358-le - All All All
Hardware Axis Q8615-e - All All All
Hardware Axis Q8752-e - All All All
Hardware Axis Q8752-e Mk Ii - All All All
Hardware Axis Q9307-lv - All All All
Hardware Axis S3008 - All All All
Hardware Axis S3008 Mk Ii - All All All
Hardware Axis S3016 - All All All
Hardware Axis S4000 - All All All
Hardware Axis V5925 - All All All
Hardware Axis V5938 - All All All
Hardware Axis W100 - All All All
Hardware Axis W101 - All All All
Hardware Axis W102 - All All All
Hardware Axis W110 - All All All
Hardware Axis W120 - All All All
Hardware Axis W401 - All All All
Hardware Axis Xc1311 - All All All
Hardware Axis Xf40-q1785 - All All All
Hardware Axis Xfq1656 - All All All
Hardware Axis Xpq1785 - All All All

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Axis Communications AB AXIS OS affected 12.0.0 12.6.18 semver Not specified

References

ReferenceSourceLinkTags
www.axis.com/dam/public/48/ab/82/cve-2025-5454pdf-en-US-504213.pdf [email protected] www.axis.com Vendor Advisory
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Vendor Comments And Credit

Discovery Credit

CNA: 51l3nc3 (en)

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report