GCVE - cpe:2.3:h:axis:q6078-e:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:axis:q6078-e:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Axis (`70b79958-9d75-5ad6-90bd-d85cad17d4e7`)
Product	Q6078 E (`d3dc8b35-efe6-55ec-bd75-f4f3007489a6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-8108`	not_vulnerable	2026-06-03 15:13:42.910850	Details available MEDIUM (6.7) An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. Published: 2025-11-11T07:10:31.421Z Updated: 2026-02-26T16:58:01.336Z Open on db.gcve.eu Reference links https://www.axis.com/dam/public/38/20/aa/cve-2025-8108pdf-en-US-504218.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6779`	not_vulnerable	2026-06-03 15:12:29.082095	Details available MEDIUM (6.7) An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. Published: 2025-11-11T07:05:51.357Z Updated: 2026-02-26T16:58:01.741Z Open on db.gcve.eu Reference links https://www.axis.com/dam/public/92/9a/13/cve-2025-6779pdf-en-US-504217.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5718`	not_vulnerable	2026-06-03 15:07:54.453332	Details available MEDIUM (6.8) The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. Published: 2025-11-11T06:52:33.565Z Updated: 2026-02-26T17:46:56.472Z Open on db.gcve.eu Reference links https://www.axis.com/dam/public/3c/a4/6a/cve-2025-5718pdf-en-US-504214.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5454`	not_vulnerable	2026-06-03 15:07:53.565382	Details available MEDIUM (6.4) An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. Published: 2025-11-11T06:50:19.130Z Updated: 2026-02-26T17:46:56.798Z Open on db.gcve.eu Reference links https://www.axis.com/dam/public/48/ab/82/cve-2025-5454pdf-en-US-504213.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5452`	not_vulnerable	2026-06-03 15:07:53.528260	Details available MEDIUM (6.6) A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the malicious ACAP application. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. Published: 2025-11-11T07:00:46.077Z Updated: 2026-02-26T16:58:02.603Z Open on db.gcve.eu Reference links https://www.axis.com/dam/public/39/ba/8b/cve-2025-5452pdf-en-US-504212.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4645`	not_vulnerable	2026-06-03 15:01:48.446412	Details available MEDIUM (6.7) An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. Published: 2025-11-11T06:45:29.674Z Updated: 2026-02-26T17:46:57.156Z Open on db.gcve.eu Reference links https://www.axis.com/dam/public/69/47/ff/cve-2025-4645pdf-en-US-504211.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.