Axis Communications AXIS Camera Station Pro Server-Side Injection Vulnerability

A server-side injection vulnerability has been identified in AXIS Camera Station Pro versions prior to 6.14. This issue allows a malicious admin to manipulate the application into executing a harmful script on the server. The vulnerability can only be exploited if the admin uses a compromised client.

Impact

Exploitation of this vulnerability could lead to unauthorized server-side script execution.

Remediation

Users are advised to update to AXIS Camera Station Pro version 6.14. The latest version can be obtained from the Axis Vulnerability Management Portal. For further assistance, contact Axis Technical Support.