This vulnerability (CWE-1287) in AXIS OS version 12.0.0 arises from insufficient validation of the specified type of input in an ACAP configuration file. An attacker could exploit this flaw to escalate privileges on the device, but only if the device is configured to allow unsigned ACAP application installations and if the attacker convinces a user to install a malicious ACAP application. The CVSS 3.1 base score is 5.7, reflecting medium severity with network attack vector, high attack complexity, required privileges, and user interaction.

Successful exploitation could lead to privilege escalation on the affected device, potentially allowing an attacker to gain higher-level access than intended. However, exploitation requires specific conditions: the device must allow unsigned ACAP application installation, and the victim must be tricked into installing a malicious application. There is no indication of known exploits in the wild.

No official patch or remediation is currently documented. Users should avoid enabling the installation of unsigned ACAP applications to mitigate the risk. Additionally, users should be cautious about installing ACAP applications from untrusted sources. Monitor the vendor's advisory for updates regarding patches or official fixes.