Privilege Escalation Vulnerability in Axis Devices via Malicious ACAP Applications

CVE-2025-5452

What is CVE-2025-5452?

A vulnerability exists in Axis devices that allows a malicious ACAP application to access sensitive administrator-level service account credentials, which can lead to unauthorized privilege escalation. This exploitation requires the device to be set up to permit unsigned ACAP applications and the attacker to successfully persuade the victim to install the malicious application. Proper security measures and configuration are essential to mitigate the risks associated with this vulnerability.

References