An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
References
| Link | Resource |
|---|---|
| https://www.axis.com/dam/public/69/47/ff/cve-2025-4645pdf-en-US-504211.pdf | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
No history.
Information
Published : 2025-11-11 07:15
Updated : 2025-11-24 17:57
NVD link : CVE-2025-4645
Mitre link : CVE-2025-4645
CVE.ORG link : CVE-2025-4645
JSON object : View
Products Affected
axis
- p1245_mk_ii
- p1468-le
- q3536-lve
- m4318-plve
- q3558-lve
- i7020
- q4809-pve
- p1387-b
- xc1311
- p1468-xle
- m3088-v
- a1214
- m3057-plr_mk_ii
- p5654-e_mk_ii
- q3839-spve
- excam_xpt_q6075
- q6075-e
- q6315-le
- c1111-e
- a8207-ve_mk_ii
- q6358-le
- xf40-q1785
- m4317-plve
- q1615-le_mk_iii
- c1110-e
- p3827-pve
- p3748-plve
- m1075-l
- q6225-le
- p3285-lve
- q6020-e
- s4000
- m7104
- q3626-ve
- m5074
- m5526-e
- m1135-e_mk_ii
- p3288-lv
- m4215-lv
- f9114-bt
- f9111-r_mk_ii_main_unit
- p5655-e
- p1518-e
- q2101-te
- q6075
- p7304
- s3016
- p1475-le
- p3738-ple
- p3265-lve-3
- q1686-dle
- m4318-plr
- p1388-be
- c1610-ve
- p3925-r
- q1715
- q3548-lve
- axis_os
- q6318-le
- f9114-b_main_unit
- p3265-lv
- m4225-lve
- c1310-e_mk_ii
- m5000
- m3086-v
- xpq1785
- c1720
- m4317-plr
- p3287-lve
- q1728-le
- m1135
- fa51
- c1211-e
- m4328-p
- q6135-le
- q8615-e
- p3925-lre
- w401
- p3747-plve
- p5676-le
- s3008_mk_ii
- q2111-e
- m3216-lve
- p3275-lve
- m4218-v
- q1656-be
- q6074
- fa54
- q1656-dle
- d201-s_xpt_q6075
- p3277-lv
- q8752-e_mk_ii
- p3288-lve
- m2035-le
- q1808-le
- p1385-be
- q3538-lve
- i7010-ve
- fa51-b
- q2112-e
- q6300-e
- p1465-le
- q3556-lve
- w101
- p3268-slve
- p4707-plve
- q9307-lv
- f9104-b_main_unit
- m3085-v
- p3275-lv
- m5075
- c8110
- f9114-b-r_mk_ii_main_unit
- m4215-v
- m4228-lve
- m4216-v
- m4308-ple
- p3277-lve
- p1275_mk_ii
- q8752-e
- c1410_mk_ii
- c1511
- f9111_mk_ii_main_unit
- s3008
- excam_xf_q1785
- p1387-be
- w100
- q1809-le
- d4200-ve
- p3285-lv
- p4708-plve
- p7316
- q1972-e
- p1385-e
- p3287-lv
- q1800-le-3
- a1610_\(-b\)
- c8210
- q1656-ble
- q6078-e
- p3267-lve
- q3538-slve
- p3278-lve
- p3267-lv
- m1055-l
- p9117-pv
- m4227-lve
- q1806-le
- d3110_mk_ii
- q1656-b
- q6075-s
- w102
- q1800-le
- m2036-le
- q6355-le
- v5925
- f9104-b_mk_ii_main_unit
- p4705-plve
- q1656
- p3278-lv
- c1210-e
- w110
- i8307-ve
- p1388-le
- f9114_main_unit
- p1467-le
- p3268-lv
- q1656-le
- q1798-le
- p1387
- p1265_mk_ii
- p3737-ple
- a1810-b
- q6074-e
- i8116-e
- a1210_\(-b\)
- m3905-r
- m3125-lve
- i7010-safety
- c1710
- m3126-lve
- p3265-lve
- p1385
- q3819-pve
- q1805-le
- q3628-ve
- q6075-se
- c6110
- i8016-lve
- q1961-te
- q1971-e
- a1710-b
- d2210-ve
- m3128-lve
- m1137
- p3818-pve
- m4216-lv
- q3546-lve
- c1510
- q1615_mk_iii
- w120
- p1385-b
- p3935-lr
- m3086-v_mic
- p3268-lve
- q1728
- q1961-xte
- d6310
- m5075-g
- p1465-le-3
- p5654-e
- q3839-pve
- p3265-v
- d4100-ve_mk_ii
- p3735-ple
- p3905-r_mk_iii
- m4218-lv
- d2110-ve
- m4327-p
- m7116
- p1387-le
- f9111_main_unit
- m3215-lve
- p1388-b
- v5938
- d1110
- xfq1656
- a1601
- p1518-le
- p3267-lve_mic
- p1388
- m5000-g
- m1137-e_mk_ii
CWE
CWE-1287
Improper Validation of Specified Type of Input
