Description
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface.

This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.
Published: 2023-02-14
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-53196 A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.
History

Thu, 20 Mar 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Subscriptions

Siemens Sipass Integrated Ac5102 \(acc-g2\) Sipass Integrated Ac5102 \(acc-g2\) Firmware Sipass Integrated Acc-ap Sipass Integrated Acc-ap Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2025-03-20T20:14:08.699Z

Reserved: 2022-05-30T10:21:52.587Z

Link: CVE-2022-31808

cve-icon Vulnrichment

Updated: 2024-08-03T07:26:01.373Z

cve-icon NVD

Status : Modified

Published: 2023-02-14T11:15:12.700

Modified: 2024-11-21T07:05:22.323

Link: CVE-2022-31808

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses