Summary
SiPass integrated ACC (Advanced Central Controller) devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.
Siemens has released updates for the affected products and recommends to update to the latest versions.
Vulnerabilities 1
-
High 7.8
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated A…
Revision history
-
#1
Publication Date
References
-
SSA-658793: Command Injection Vulnerability in SiPass integrated AC5102 / ACC-G2 and ACC-AP - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-658793.pdf
-
SSA-658793: Command Injection Vulnerability in SiPass integrated AC5102 / ACC-G2 and ACC-AP - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-658793.txt