An ACAP configuration file has improper permissions and lacks input...
Vulnerability Description
An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-8108
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- URCQ
More from Axis Communications AB
View All →Affected Vendor
Axis Communications AB
View all reports →