Summary
Ein Angreifer kann mehrere Schwachstellen in Axis Axis OS ausnutzen, um seine Privilegien zu erhöhen, um Sicherheitsvorkehrungen zu umgehen und um beliebigen Programmcode auszuführen.
Product
Axis OS ist ein Linux-basiertes Betriebssystem, das in Netzwerkvideoprodukten von Axis Communications verwendet wird.
Vulnerabilities 4
-
Medium 6.7
The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalatio…
-
Medium 6.7
A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized …
-
Medium 6.5
Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which coul…
-
Low 3.9
The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting …
Revision history
-
#1
Initiale Fassung
References
-
AXIS Security Advisory vom 2026-11-10
https://www.axis.com/dam/public/12/1f/f8/cve-2026-14542pdf-en-US-561256.pdf
-
AXIS Security Advisory vom 2026-11-10
https://www.axis.com/dam/public/37/e2/7c/cve-2026-9063pdf-en-US-561254.pdf
-
AXIS Security Advisory vom 2026-11-10
https://www.axis.com/dam/public/c5/06/79/cve-2026-63282pdf-en-US-561259.pdf
-
AXIS Security Advisory vom 2026-11-10
https://www.axis.com/dam/public/cd/92/6b/cve-2026-14543pdf-en-US-561257.pdf