What is CVE-2025-5454?

CVE-2025-5454 is a medium-severity vulnerability in Axis A1210_\(-b\), classified under Path Traversal: '.../...//'. CVSS score: 6.4/10. Published 2025-11-11.

How severe is CVE-2025-5454?

Medium severity. CVSS v3 base score is 6.4 out of 10.

Path Traversal in Axis A1210_\(-b\)

CVE-2025-5454

An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the inst…

EPSS: 0.001 (3.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Axis A1210_\(-b\)
Axis A1214
Axis A1601
Axis A1610_\(-b\)
Axis A1710-b
Axis A1810-b
Axis A8207-ve_mk_ii
Axis Axis_os
Axis C1110-e
Axis C1111-e

Weakness classification (CWE)

CWE-35 — Path Traversal: '.../...//'

References

product-security@axis.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-5454?: CVE-2025-5454 is a medium-severity vulnerability in Axis A1210_\(-b\), classified under Path Traversal: '.../...//'. CVSS score: 6.4/10. Published 2025-11-11.
How severe is CVE-2025-5454?: Medium severity. CVSS v3 base score is 6.4 out of 10.