CVE-2022-31808

HIGH

SiPass integrated ACC-AP/AC5102 < 2.85.43/2.85.44 - Authenticated Privilege Escalation via Telnet CLI

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.

References (1)

Core 1

Scores

CVSS v3 7.8
EPSS 0.0006
EPSS Percentile 17.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-20
Status published
Products (2)
siemens/sipass_integrated_ac5102_\(acc-g2\)_firmware < 2.85.44
siemens/sipass_integrated_acc-ap_firmware < 2.85.43
Published Feb 14, 2023
Tracked Since Feb 18, 2026