Axis Products Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in Axis Device Manager versions prior to 5.32 and Axis Camera Station Pro versions prior to 6.7. This vulnerability arises from a flaw in the communication protocol between the server process and the service control, which could be exploited to gain elevated privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain elevated rights or access within the application or system.

Remediation

Axis has released patches for this vulnerability. Users of Axis Device Manager should upgrade to version 5.32. Users of Axis Camera Station Pro should upgrade to version 6.8. For further assistance, contact Axis Technical Support.