CVE-2022-23410: Axis IP Utility

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same folder.

Affected products

• Axis IP Utility: before 4.18.0 (fixed in 4.18.0)

Published 2022-02-14. Last modified 2026-06-17.