This vulnerability involves a TOCTOU race condition in the ACAP framework of AXIS OS, which may lead to privilege escalation. Exploitation requires that the Axis device allows unsigned ACAP application installation and that an attacker convinces a user to install a malicious ACAP application. The issue is identified as CWE-367. There is no vendor advisory indicating a patch or remediation level, and no known exploits in the wild have been reported. The affected version explicitly stated is 12.0.0.

Successful exploitation could result in privilege escalation on the affected device, potentially allowing an attacker with user interaction to gain higher privileges. However, exploitation requires specific conditions: the device must allow unsigned ACAP app installation, and the victim must install a malicious app. There is no indication of impact on confidentiality, integrity, or availability beyond privilege escalation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, avoid configuring devices to allow installation of unsigned ACAP applications. Users should be cautious about installing ACAP applications from untrusted sources.