Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:sipass_integrated_ac5102_(acc-g2):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSipass Integrated Ac5102 (Acc G2) (75eb1c33-b441-5a87-9a7b-cdf4ef53207f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27494 vulnerable 2026-06-08 07:14:55.233839 Details available
CRITICAL (9.1)
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sanitize input for the pubkey endpoint of the REST API. This could allow an authenticated remote administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges.
Published: 2025-03-11T09:48:34.182Z
Updated: 2025-03-11T13:21:07.671Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27493 vulnerable 2026-06-08 07:14:55.229052 Details available
HIGH (8.2)
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sanitize user input for specific commands on the telnet command line interface. This could allow an authenticated local administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges.
Published: 2025-03-11T09:48:32.888Z
Updated: 2025-03-11T13:23:01.779Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52285 vulnerable 2026-06-08 06:52:14.721654 Details available
MEDIUM (5.3)
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.8), SiPass integrated ACC-AP (All versions < V6.4.8). Affected devices expose several MQTT URLs without authentication. This could allow an unauthenticated remote attacker to access sensitive data.
Published: 2025-03-11T09:47:58.676Z
Updated: 2025-03-11T14:07:41.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31808 vulnerable 2026-06-08 05:44:42.370610 Details available
HIGH (7.8)
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.
Published: 2023-02-14T10:36:07.859Z
Updated: 2025-03-20T20:14:08.699Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.