Medium SSA-420375 1 CVE

SSA-420375: Improper Integrity Check of Firmware Updates in Building X - Security Manager Edge Controller (ACC-AP)

Published Dec 9, 2025 · Updated Dec 9, 2025

Vendor: Siemens Product: Building X - Security Manager Edge Controller (ACC-AP)

Summary

Building X - Security Manager Edge Controller (ACC-AP) devices do not properly check the integrity of firmware updates. This could allow an attacker to upload a maliciously modified firmware onto the device.

Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Medium 6.2

CVE-2022-31807

A vulnerability has been identified in Building X - Security Manager Edge Controller (ACC-AP) (All versions). Affected …

Siemens Building X - Security Manager Edge Controller (ACC-AP) Browsers ICS / OT

May 23, 2025

Revision history

2025-12-09 #1
Publication Date

References

SSA-420375: Improper Integrity Check of Firmware Updates in Building X - Security Manager Edge Controller (ACC-AP) - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-420375.html