← Back

CVE-2022-31808

nvd nist
Published: Feb 14, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.

Affected (2)

Siemens
2 products
Sipass Integrated Acc Ap Firmware
Sipass Integrated Ac5102 (acc G2) Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sipass Integrated Acc Ap Firmware
Before 2.85.43
Running on/withPlatform Versions
Siemens
Sipass Integrated Acc Ap
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sipass Integrated Ac5102 (acc G2) Firmware
Before 2.85.44
Running on/withPlatform Versions
Siemens
Sipass Integrated Ac5102 (acc G2)
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: productcert@siemens.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.