Summary
Ein Angreifer kann mehrere Schwachstellen in Axis Axis OS ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen (sogar Administratorrechte) zu erlangen, Daten zu manipulieren, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.
Product
Axis OS ist ein Linux-basiertes Betriebssystem, das in Netzwerkvideoprodukten von Axis Communications verwendet wird.
Vulnerabilities 11
-
Medium 6.8
The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only b…
-
Medium 6.7
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vul…
-
Medium 6.7
ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escal…
-
Medium 6.7
An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privil…
-
Medium 6.7
An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privile…
-
Medium 6.6
A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applica…
-
Medium 6.4
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to pot…
-
Medium 6.4
The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain …
-
Medium 6.0
A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it.
-
Medium 4.3
The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usabili…
-
Low 3.1
It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and …
Revision history
-
#3
Referenz(en) aufgenommen: EUVD-2025-74036
-
#2
Referenz(en) aufgenommen: EUVD-2025-74045, EUVD-2025-74041, EUVD-2025-74040, EUVD-2025-74035, EUVD-2025-74046, EUVD-2025-74042, EUVD-2025-74043, EUVD-2025-74044
-
#1
Initiale Fassung
References
-
Axix Security Advisories vom 2025-11-10
https://www.axis.com/dam/public/1f/f8/f0/cve-2025-6571pdf-en-US-504216.pdf
-
Axix Security Advisories vom 2025-11-10
https://www.axis.com/dam/public/23/a3/00/cve-2025-9055pdf-en-US-504219.pdf
-
Axix Security Advisories vom 2025-11-10
https://www.axis.com/dam/public/39/ba/8b/cve-2025-5452pdf-en-US-504212.pdf
-
Axix Security Advisories vom 2025-11-10
https://www.axis.com/dam/public/3c/a4/6a/cve-2025-5718pdf-en-US-504214.pdf
-
Axix Security Advisories vom 2025-11-10
https://www.axis.com/dam/public/48/ab/82/cve-2025-5454pdf-en-US-504213.pdf
-
Axix Security Advisories vom 2025-11-10
https://www.axis.com/dam/public/69/47/ff/cve-2025-4645pdf-en-US-504211.pdf
-
Axix Security Advisories vom 2025-11-10
https://www.axis.com/dam/public/92/9a/13/cve-2025-6779pdf-en-US-504217.pdf
-
Axix Security Advisories vom 2025-11-10
https://www.axis.com/dam/public/a2/c7/8c/cve-2025-10714pdf-en-US-504221.pdf
-
Axix Security Advisories vom 2025-11-10
https://www.axis.com/dam/public/ef/91/c3/cve-2025-6298pdf-en-US-504215.pdf
-
Axix Security Advisories vom 2025-11-10
https://www.axis.com/dam/public/f1/f0/1e/cve-2025-9524pdf-en-US-504220.pdf
-
Axix Security Advisories vom 2025-11-10
https://www.axis.com/dam/public/f5/62/80/cve-2025-8998pdf-en-US-504374.pdf