Back to the CVE list
CVE-2025-5454

Vulnerability in Axis OS

CVSS score

6.7

EPSS probability

%0.2

Risk score

0.0

Published

11 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2025-5454 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2025-5454 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1axisaxis os View
2axisa1210 (-b) View
3axisa1214 View
4axisa1601 View
5axisa1610 (-b) View
6axisa1710-b View
7axisa1810-b View
8axisa8207-ve mk ii View
9axisc1110-e View
10axisc1111-e View
11axisc1210-e View
12axisc1211-e View
13axisc1310-e mk ii View
14axisc1410 mk ii View
15axisc1510 View
16axisc1511 View
17axisc1610-ve View
18axisc1710 View
19axisc1720 View
20axisc6110 View
21axisc8110 View
22axisc8210 View
23axisd1110 View
24axisd201-s xpt q6075 View
25axisd2110-ve View
26axisd2210-ve View
27axisd3110 mk ii View
28axisd4100-ve mk ii View
29axisd4200-ve View
30axisd6310 View
31axisexcam xf q1785 View
32axisexcam xpt q6075 View
33axisf9104-b main unit View
34axisf9104-b mk ii main unit View
35axisf9111-r mk ii main unit View
36axisf9111 main unit View
37axisf9111 mk ii main unit View
38axisf9114-b-r mk ii main unit View
39axisf9114-b main unit View
40axisf9114-bt View
41axisf9114 main unit View
42axisfa51 View
43axisfa51-b View
44axisfa54 View
45axisi7010-safety View
46axisi7010-ve View
47axisi7020 View
48axisi8016-lve View
49axisi8116-e View
50axisi8307-ve View
51axism1055-l View
52axism1075-l View
53axism1135 View
54axism1135-e mk ii View
55axism1137 View
56axism1137-e mk ii View
57axism2035-le View
58axism2036-le View
59axism3057-plr mk ii View
60axism3085-v View
61axism3086-v View
62axism3086-v mic View
63axism3088-v View
64axism3125-lve View
65axism3126-lve View
66axism3128-lve View
67axism3215-lve View
68axism3216-lve View
69axism3905-r View
70axism4215-lv View
71axism4215-v View
72axism4216-lv View
73axism4216-v View
74axism4218-lv View
75axism4218-v View
76axism4225-lve View
77axism4227-lve View
78axism4228-lve View
79axism4308-ple View
80axism4317-plr View
81axism4317-plve View
82axism4318-plr View
83axism4318-plve View
84axism4327-p View
85axism4328-p View
86axism5000 View
87axism5000-g View
88axism5074 View
89axism5075 View
90axism5075-g View
91axism5526-e View
92axism7104 View
93axism7116 View
94axisp1245 mk ii View
95axisp1265 mk ii View
96axisp1275 mk ii View
97axisp1385 View
98axisp1385-b View
99axisp1385-be View
100axisp1385-e View
101axisp1387 View
102axisp1387-b View
103axisp1387-be View
104axisp1387-le View
105axisp1388 View
106axisp1388-b View
107axisp1388-be View
108axisp1388-le View
109axisp1465-le View
110axisp1465-le-3 View
111axisp1467-le View
112axisp1468-le View
113axisp1468-xle View
114axisp1475-le View
115axisp1518-e View
116axisp1518-le View
117axisp3265-lv View
118axisp3265-lve View
119axisp3265-lve-3 View
120axisp3265-v View
121axisp3267-lv View
122axisp3267-lve View
123axisp3267-lve mic View
124axisp3268-lv View
125axisp3268-lve View
126axisp3268-slve View
127axisp3275-lv View
128axisp3275-lve View
129axisp3277-lv View
130axisp3277-lve View
131axisp3278-lv View
132axisp3278-lve View
133axisp3285-lv View
134axisp3285-lve View
135axisp3287-lv View
136axisp3287-lve View
137axisp3288-lv View
138axisp3288-lve View
139axisp3735-ple View
140axisp3737-ple View
141axisp3738-ple View
142axisp3747-plve View
143axisp3748-plve View
144axisp3818-pve View
145axisp3827-pve View
146axisp3905-r mk iii View
147axisp3925-lre View
148axisp3925-r View
149axisp3935-lr View
150axisp4705-plve View
151axisp4707-plve View
152axisp4708-plve View
153axisp5654-e View
154axisp5654-e mk ii View
155axisp5655-e View
156axisp5676-le View
157axisp7304 View
158axisp7316 View
159axisp9117-pv View
160axisq1615-le mk iii View
161axisq1615 mk iii View
162axisq1656 View
163axisq1656-b View
164axisq1656-be View
165axisq1656-ble View
166axisq1656-dle View
167axisq1656-le View
168axisq1686-dle View
169axisq1715 View
170axisq1728 View
171axisq1728-le View
172axisq1798-le View
173axisq1800-le View
174axisq1800-le-3 View
175axisq1805-le View
176axisq1806-le View
177axisq1808-le View
178axisq1809-le View
179axisq1961-te View
180axisq1961-xte View
181axisq1971-e View
182axisq1972-e View
183axisq2101-te View
184axisq2111-e View
185axisq2112-e View
186axisq3536-lve View
187axisq3538-lve View
188axisq3538-slve View
189axisq3546-lve View
190axisq3548-lve View
191axisq3556-lve View
192axisq3558-lve View
193axisq3626-ve View
194axisq3628-ve View
195axisq3819-pve View
196axisq3839-pve View
197axisq3839-spve View
198axisq4809-pve View
199axisq6020-e View
200axisq6074 View
Total affected vendors: 1|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
6.7CVSS V31MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HNVD
6.4CVSS V31MEDIUMCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:HNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-5454 is associated with the following CWEs:

CWE-35: Common Weakness Enumeration Entry CWE-35

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-5454 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsHigh
UserGerekmiyor

Official Sources and Advisories

https://www.axis.com/dam/public/48/ab/82/cve-2025-5454pdf-en-US-504213.pdfvendor-advisory

CVSS Vector Radar Chart

6.7 / 10
Attack VectorLocalComplexityLowPrivilegesHighUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredHigh privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

A
axis logo
axis

Weakness Type (CWE & CAPEC)

CWE-35

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-5454"