CVE-2025-27493

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-27493
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sanitize user input for specific commands on the telnet command line interface. This could allow an authenticated local administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges.

8.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.5 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://cert-portal.siemens.com/productcert/html/ssa-515903.html Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:siemens:sipass_integrated_ac5102_\(acc-g2\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sipass_integrated_ac5102_\(acc-g2\):-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:siemens:sipass_integrated_acc-ap_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sipass_integrated_acc-ap:-:*:*:*:*:*:*:*
History

22 Aug 2025, 17:50

Type Values Removed Values Added
First Time Siemens sipass Integrated Ac5102 \(acc-g2\)
Siemens sipass Integrated Acc-ap Firmware
Siemens sipass Integrated Acc-ap
Siemens sipass Integrated Ac5102 \(acc-g2\) Firmware
Siemens
Summary
  • (es) Se ha identificado una vulnerabilidad en SiPass integrated AC5102 (ACC-G2) (Todas las versiones &lt; V6.4.9), SiPass integrated ACC-AP (Todas las versiones &lt; V6.4.9). Los dispositivos afectados depuran incorrectamente la entrada del usuario para comandos específicos en la interfaz de línea de comandos de Telnet. Esto podría permitir que un administrador local autenticado aumente los privilegios mediante la inyección de comandos arbitrarios que se ejecutan con privilegios de superusuario.
References () https://cert-portal.siemens.com/productcert/html/ssa-515903.html - () https://cert-portal.siemens.com/productcert/html/ssa-515903.html - Vendor Advisory
CPE cpe:2.3:h:siemens:sipass_integrated_acc-ap:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sipass_integrated_ac5102_\(acc-g2\):-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sipass_integrated_ac5102_\(acc-g2\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sipass_integrated_acc-ap_firmware:*:*:*:*:*:*:*:*

11 Mar 2025, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-11 10:15

Updated : 2025-08-22 17:50

NVD link : CVE-2025-27493

Mitre link : CVE-2025-27493

CVE.ORG link : CVE-2025-27493

JSON object : View

Products Affected

siemens

  • sipass_integrated_acc-ap
  • sipass_integrated_acc-ap_firmware
  • sipass_integrated_ac5102_\(acc-g2\)
  • sipass_integrated_ac5102_\(acc-g2\)_firmware
CWE
CWE-20

Improper Input Validation