Sipass Integrated Acc Ap Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:siemens:sipass_integrated_acc-ap_firmware:*:*:*:*:*:*:*:*part: o version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Sipass Integrated Acc Ap Firmware (a7b8c638-bfa8-53be-9281-e883b0cc9a5e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-27494 |
vulnerable | 2026-06-08 07:14:55.234300 |
Details available
CRITICAL (9.1)
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sanitize input for the pubkey endpoint of the REST API. This could allow an authenticated remote administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges.
Published: 2025-03-11T09:48:34.182Z
Updated: 2025-03-11T13:21:07.671Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27493 |
vulnerable | 2026-06-08 07:14:55.232478 |
Details available
HIGH (8.2)
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sanitize user input for specific commands on the telnet command line interface. This could allow an authenticated local administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges.
Published: 2025-03-11T09:48:32.888Z
Updated: 2025-03-11T13:23:01.779Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31808 |
vulnerable | 2026-06-08 05:44:42.371294 |
Details available
HIGH (7.8)
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface.
This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.
Published: 2023-02-14T10:36:07.859Z
Updated: 2025-03-20T20:14:08.699Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31807 |
vulnerable | 2026-06-08 05:44:42.368437 |
Details available
MEDIUM (6.2)
A vulnerability has been identified in Building X - Security Manager Edge Controller (ACC-AP) (All versions). Affected devices do not properly check the integrity of firmware updates. This could allow a local attacker to upload a maliciously modified firmware onto the device. In a second scenario, a remote attacker who is able to intercept the transfer of a valid firmware from the server to the device could modify the firmware "on the fly".
Published: 2025-05-23T15:03:38.535Z
Updated: 2025-12-09T10:44:02.318Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.