2 lines
2.7 KiB
JSON
2 lines
2.7 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"AXIS OS","vendor":"Axis Communications AB","versions":[{"lessThan":"12.10.36","status":"affected","version":"12.0.0","versionType":"semver"}]}],"source":"product-security@axis.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:axis:axis_os:*:*:*:*:active:*:*:*","matchCriteriaId":"3CD3401A-1B20-4192-9B1D-90FDC768689E","versionEndExcluding":"12.10.37","versionStartIncluding":"12.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privilege escalation. This vulnerability can only be exploited if an attacker can log in to the Axis device using SSH."},{"lang":"es","value":"Un archivo de configuración en el sistema de archivos local tenía una validación de entrada incorrecta que podría permitir la ejecución de código y potencialmente conducir a la escalada de privilegios. Esta vulnerabilidad solo puede ser explotada si un atacante puede iniciar sesión en el dispositivo Axis usando SSH."}],"id":"CVE-2026-1185","lastModified":"2026-10-26T18:10:00.173","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.5,"source":"product-security@axis.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-1185","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-05-12T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-05-12T07:16:09.720","references":[{"source":"product-security@axis.com","tags":["Vendor Advisory"],"url":"https://www.axis.com/dam/public/69/df/8d/cve-2026-1185pdf-en-US-530733.pdf"}],"sourceIdentifier":"product-security@axis.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-732"}],"source":"product-security@axis.com","type":"Secondary"}]}
|