CVE-2025-3892: Medium severity Axis Axis Device vulnerability
ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3892?
CVE-2025-3892 is classified as a privilege escalation vulnerability that can lead to significant security risks if exploited.
How do I fix CVE-2025-3892?
To fix CVE-2025-3892, ensure that the configuration of Axis devices does not allow the installation of unsigned ACAP applications.
What types of devices are affected by CVE-2025-3892?
CVE-2025-3892 affects Axis devices that are configured to permit the installation of unsigned ACAP applications.
What can an attacker achieve by exploiting CVE-2025-3892?
By exploiting CVE-2025-3892, an attacker can execute malicious applications with elevated privileges, potentially compromising the device.
How can users protect against CVE-2025-3892?
Users can protect against CVE-2025-3892 by disabling the installation of unsigned ACAP applications and ensuring devices are kept updated.