ZDI-CAN-25774: ZDI-25-858: Axis Communications Autodesk Plugin AzureBlobRestAPI axiscontentfiles Remote Code Execution Vulnerability

Published Aug 21, 2025

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Axis Communications Autodesk Plugin. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8.

Affected Software

1 affected component

Axis Communications Autodesk Plugin

Event History

Aug 21, 2025

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-25774?

The severity of ZDI-CAN-25774 is rated at 8.8 on the CVSS scale, indicating a high risk of exploitation.

How do I fix ZDI-CAN-25774?

Fixing ZDI-CAN-25774 involves updating the Axis Communications Autodesk Plugin to the latest version provided by the vendor.

Who can exploit ZDI-CAN-25774?

ZDI-CAN-25774 can be exploited by remote attackers without requiring authentication.

What type of vulnerability is ZDI-CAN-25774?

ZDI-CAN-25774 is a remote code execution vulnerability that allows attackers to execute arbitrary code on affected systems.

Which software is affected by ZDI-CAN-25774?

ZDI-CAN-25774 affects installations of the Axis Communications Autodesk Plugin.