by Kastro
Paper/Archive/CVE-2025-27493

CVE-2025-27493

Siemens SiPass integrated AC5102 (ACC-G2) — A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions…

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
29
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 7.4.074 × 201.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sanitize user input for specific commands on the telnet command line interface. This could allow an authenticated local administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges.

Affected

ProductAffectedFixed inSource
SiPass integrated AC5102 (ACC-G2)< V6.4.9V6.4.9CNA
SiPass integrated ACC-AP< V6.4.9V6.4.9CNA

Scores by source

siemens (CNA)9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
siemens (CNA)8.2CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcert-portal.siemens.com/productcert/html/ssa-515903.html