The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
References
| Link | Resource |
|---|---|
| https://www.axis.com/dam/public/3c/a4/6a/cve-2025-5718pdf-en-US-504214.pdf | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
No history.
Information
Published : 2025-11-11 07:15
Updated : 2025-11-24 17:56
NVD link : CVE-2025-5718
Mitre link : CVE-2025-5718
CVE.ORG link : CVE-2025-5718
JSON object : View
Products Affected
axis
- p1245_mk_ii
- p1468-le
- q3536-lve
- m4318-plve
- q3558-lve
- i7020
- q4809-pve
- p1387-b
- xc1311
- p1468-xle
- m3088-v
- a1214
- m3057-plr_mk_ii
- p5654-e_mk_ii
- q3839-spve
- excam_xpt_q6075
- q6075-e
- q6315-le
- c1111-e
- a8207-ve_mk_ii
- q6358-le
- xf40-q1785
- m4317-plve
- q1615-le_mk_iii
- c1110-e
- p3827-pve
- p3748-plve
- m1075-l
- q6225-le
- p3285-lve
- q6020-e
- s4000
- m7104
- q3626-ve
- m5074
- m5526-e
- m1135-e_mk_ii
- p3288-lv
- m4215-lv
- f9114-bt
- f9111-r_mk_ii_main_unit
- p5655-e
- p1518-e
- q2101-te
- q6075
- p7304
- s3016
- p1475-le
- p3738-ple
- p3265-lve-3
- q1686-dle
- m4318-plr
- p1388-be
- c1610-ve
- p3925-r
- q1715
- q3548-lve
- axis_os
- q6318-le
- f9114-b_main_unit
- p3265-lv
- m4225-lve
- c1310-e_mk_ii
- m5000
- m3086-v
- xpq1785
- c1720
- m4317-plr
- p3287-lve
- q1728-le
- m1135
- fa51
- c1211-e
- m4328-p
- q6135-le
- q8615-e
- p3925-lre
- w401
- p3747-plve
- p5676-le
- s3008_mk_ii
- q2111-e
- m3216-lve
- p3275-lve
- m4218-v
- q1656-be
- q6074
- fa54
- q1656-dle
- d201-s_xpt_q6075
- p3277-lv
- q8752-e_mk_ii
- p3288-lve
- m2035-le
- q1808-le
- p1385-be
- q3538-lve
- i7010-ve
- fa51-b
- q2112-e
- q6300-e
- p1465-le
- q3556-lve
- w101
- p3268-slve
- p4707-plve
- q9307-lv
- f9104-b_main_unit
- m3085-v
- p3275-lv
- m5075
- c8110
- f9114-b-r_mk_ii_main_unit
- m4215-v
- m4228-lve
- m4216-v
- m4308-ple
- p3277-lve
- p1275_mk_ii
- q8752-e
- c1410_mk_ii
- c1511
- f9111_mk_ii_main_unit
- s3008
- excam_xf_q1785
- p1387-be
- w100
- q1809-le
- d4200-ve
- p3285-lv
- p4708-plve
- p7316
- q1972-e
- p1385-e
- p3287-lv
- q1800-le-3
- a1610_\(-b\)
- c8210
- q1656-ble
- q6078-e
- p3267-lve
- q3538-slve
- p3278-lve
- p3267-lv
- m1055-l
- p9117-pv
- m4227-lve
- q1806-le
- d3110_mk_ii
- q1656-b
- q6075-s
- w102
- q1800-le
- m2036-le
- q6355-le
- v5925
- f9104-b_mk_ii_main_unit
- p4705-plve
- q1656
- p3278-lv
- c1210-e
- w110
- i8307-ve
- p1388-le
- f9114_main_unit
- p1467-le
- p3268-lv
- q1656-le
- q1798-le
- p1387
- p1265_mk_ii
- p3737-ple
- a1810-b
- q6074-e
- i8116-e
- a1210_\(-b\)
- m3905-r
- m3125-lve
- i7010-safety
- c1710
- m3126-lve
- p3265-lve
- p1385
- q3819-pve
- q1805-le
- q3628-ve
- q6075-se
- c6110
- i8016-lve
- q1961-te
- q1971-e
- a1710-b
- d2210-ve
- m3128-lve
- m1137
- p3818-pve
- m4216-lv
- q3546-lve
- c1510
- q1615_mk_iii
- w120
- p1385-b
- p3935-lr
- m3086-v_mic
- p3268-lve
- q1728
- q1961-xte
- d6310
- m5075-g
- p1465-le-3
- p5654-e
- q3839-pve
- p3265-v
- d4100-ve_mk_ii
- p3735-ple
- p3905-r_mk_iii
- m4218-lv
- d2110-ve
- m4327-p
- m7116
- p1387-le
- f9111_main_unit
- m3215-lve
- p1388-b
- v5938
- d1110
- xfq1656
- a1601
- p1518-le
- p3267-lve_mic
- p1388
- m5000-g
- m1137-e_mk_ii
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
