An ACAP configuration file has improper permissions, which could allow...
Vulnerability Description
An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-6779
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- URCQ
More from Axis Communications AB
View All →Affected Vendor
Axis Communications AB
View all reports →