Medium SSA-367714 1 CVE

SSA-367714: Improper Integrity Check of Firmware Updates in SiPass integrated AC5102 / ACC-G2 and ACC-AP

Published May 23, 2025 · Updated Oct 14, 2025 · Revision 2

Vendor: Siemens Product: SiPass integrated AC5102 (ACC-G2) Product: SiPass integrated ACC-AP

Summary

SiPass integrated ACC (Advanced Central Controller) devices do not properly check the integrity of firmware updates. This could allow an attacker to upload a maliciously modified firmware onto the device.

Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Medium 6.2

CVE-2022-31807

A vulnerability has been identified in Building X - Security Manager Edge Controller (ACC-AP) (All versions). Affected …

Siemens Building X - Security Manager Edge Controller (ACC-AP) Browsers ICS / OT

May 23, 2025

Revision history

2025-10-14 #2
Clarified that currently no fix is planned for affected devices
2025-05-23 #1
Publication Date

References

SSA-367714: Improper Integrity Check of Firmware Updates in SiPass integrated AC5102 / ACC-G2 and ACC-AP - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-367714.html