Privilege Escalation Vulnerability in Axis Devices

CVE-2025-3892

What is CVE-2025-3892?

This vulnerability allows for privilege escalation within Axis devices via the installation of unsigned ACAP applications. An attacker must first convince a user to install a malicious ACAP application on a device configured to accept such installations. Successfully exploiting this vulnerability can grant an attacker elevated privileges, potentially compromising the security of the device and its operational environment. Organizations using Axis devices are urged to ensure that only signed ACAP applications are installed to mitigate this risk.

References