Axis Camera Station Pro File Modification Vulnerability Allowing Non-Admin Users to Access Admin-Protected Locations

A vulnerability exists in Axis Camera Station Pro versions prior to 6.8, allowing non-admin users to modify a specific file used by the server. This modification can be exploited to create files or alter the content of files in an admin-protected location.

Impact

Exploitation of this vulnerability could lead to unauthorized access and modification of files in an admin-protected area, potentially allowing for the manipulation of sensitive information or administrative functions.

Remediation

Axis has released a patched version of Axis Camera Station Pro. Users are advised to update to version 6.8. The latest versions can be found on the Axis website. For further assistance, contact Axis Technical Support.