CVE-2025-6779: Command Injection
An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6779?
CVE-2025-6779 is considered a medium-severity vulnerability due to the potential for privilege escalation through command injection.
How do I fix CVE-2025-6779?
To fix CVE-2025-6779, ensure that ACAP configuration files have appropriate permissions and restrict the installation of unsigned ACAP applications.
What products are affected by CVE-2025-6779?
CVE-2025-6779 affects Axis devices that allow the installation of unsigned ACAP applications.
Can CVE-2025-6779 be exploited remotely?
CVE-2025-6779 may allow remote exploitation if an attacker can convince the device user to install an unsigned ACAP application.
What are the consequences of CVE-2025-6779 being exploited?
Exploitation of CVE-2025-6779 can lead to command injection and privilege escalation, potentially compromising the security of the Axis device.