This vulnerability is a TOCTOU race condition in the ACAP framework of AXIS OS, which can lead to privilege escalation if exploited. The flaw exists only when the device permits installation of unsigned ACAP applications. An attacker must convince a user to install a malicious ACAP application to exploit this issue. The CVSS 3.1 base score is 5.1, reflecting medium severity with local attack vector, high attack complexity, required high privileges, and user interaction. No official patch or remediation guidance is currently available from the vendor.

Successful exploitation could result in privilege escalation on the affected device, potentially allowing an attacker to gain higher privileges than intended. However, exploitation requires local access with high privileges, user interaction, and the device must be configured to allow unsigned ACAP applications, limiting the attack surface.

No official patch or remediation is currently available. Mitigation involves ensuring that devices are not configured to allow installation of unsigned ACAP applications and exercising caution to prevent installation of untrusted ACAP applications. Monitor vendor advisories for updates or patches addressing this vulnerability.