CVE-2025-30027: Input Validation
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30027?
CVE-2025-30027 is considered a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2025-30027?
To fix CVE-2025-30027, ensure that your Axis device is configured to only allow signed ACAP applications and avoid installing untrusted applications.
What products are affected by CVE-2025-30027?
CVE-2025-30027 affects Axis devices configured to permit the installation of unsigned ACAP applications.
What are the risks of CVE-2025-30027 if exploited?
If exploited, CVE-2025-30027 could allow an attacker to execute arbitrary code on the compromised Axis device.
How does CVE-2025-30027 become exploitable?
CVE-2025-30027 becomes exploitable when an attacker convinces a victim to install a malicious unsigned ACAP application on the device.