Axis P3277-LVE

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:axis:p3277-lve:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorAxis (70b79958-9d75-5ad6-90bd-d85cad17d4e7)
ProductP3277 Lve (a9c6a05e-6af3-54bb-a6f9-2bbf36f9992f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8108 not_vulnerable 2026-06-08 07:45:19.567206 Details available
MEDIUM (6.7)
An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Published: 2025-11-11T07:10:31.421Z
Updated: 2026-02-26T16:58:01.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6779 not_vulnerable 2026-06-08 07:43:16.379523 Details available
MEDIUM (6.7)
An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Published: 2025-11-11T07:05:51.357Z
Updated: 2026-02-26T16:58:01.741Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5718 not_vulnerable 2026-06-08 07:37:25.533010 Details available
MEDIUM (6.8)
The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Published: 2025-11-11T06:52:33.565Z
Updated: 2026-02-26T17:46:56.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5454 not_vulnerable 2026-06-08 07:37:24.724496 Details available
MEDIUM (6.4)
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Published: 2025-11-11T06:50:19.130Z
Updated: 2026-02-26T17:46:56.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5452 not_vulnerable 2026-06-08 07:37:24.606064 Details available
MEDIUM (6.6)
A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the malicious ACAP application. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Published: 2025-11-11T07:00:46.077Z
Updated: 2026-02-26T16:58:02.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4645 not_vulnerable 2026-06-08 07:29:16.909656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.