Privilege Escalation Vulnerability in Axis Devices due to Improper ACAP Configuration

CVE-2025-8108

What is CVE-2025-8108?

This vulnerability arises from improper permissions and lack of input validation in the ACAP configuration files of Axis devices, which can potentially allow attackers to escalate privileges. Exploitation is feasible under specific conditions where the devices permit the installation of unsigned ACAP applications. An attacker may trick a victim into installing a malicious ACAP application, which could lead to unauthorized access and control over the device.

References