Description
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.8), SiPass integrated ACC-AP (All versions < V6.4.8). Affected devices expose several MQTT URLs without authentication. This could allow an unauthenticated remote attacker to access sensitive data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SiPass integrated AC5102 (ACC-G2) | < V6.4.8 | V6.4.8 |
| Siemens | SiPass integrated ACC-AP | < V6.4.8 | V6.4.8 |
Advisories 3
- ICSA-25-072-04 Siemens SiPass integrated AC5102/ACC-G2 and ACC-AP CISA ICS & IT advisories · May 6, 2025
- NCSC-2025-0077 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Mar 11, 2025
- SSA-515903 SSA-515903: Multiple Vulnerabilities in SiPass integrated AC5102 / ACC-G2 and ACC-AP Siemens ProductCERT · Mar 11, 2025