Arbitrary Code Execution Vulnerability in Axis Devices

CVE-2025-4645

What is CVE-2025-4645?

This vulnerability arises from an insufficient input validation in the ACAP configuration file, potentially allowing attackers to execute arbitrary code on affected Axis devices. For this exploit to succeed, the device must be configured to permit the installation of unsigned ACAP applications, and an attacker must persuade the target user to install a compromised application. It highlights the importance of strict input validation and the need for secure installation practices to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References