Path Traversal Vulnerability in Axis Devices - ACAP Configuration Flaw

CVE-2025-5454

What is CVE-2025-5454?

A flaw in the ACAP configuration file of Axis devices allows for insufficient input validation, which could lead to a path traversal attack. This vulnerability can be exploited if the device is configured to permit the installation of unsigned ACAP applications and the attacker successfully convinces the user to install a malicious application. Exploiting this flaw could potentially allow an unauthorized user to gain elevated privileges on the affected device.

References