by Kastro
Paper/Archive/CVE-2025-43027

CVE-2025-43027

Genetec Inc. Genetec Security Center — A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain admi…

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 30.4.304 × 206.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to the Genetec Security Center system. The Genetec engineering team discovered this issue internally. There is currently no evidence that this vulnerability has been exploited in the wild.

Affected

ProductAffectedFixed inSource
Genetec Security Center<5.9.5.10–CNA
Genetec Security Center>=5.10.0.0 <5.10.4.29>=5.9.5.10CNA
Genetec Security Center>=5.11.0.0 <5.11.3.25>=5.9.5.10CNA
Genetec Security Center>=5.12.0.0 <5.12.2.12>=5.9.5.10CNA
Genetec Security Center>=5.13.0.0 <5.13.2.3>=5.9.5.10CNA

Scores by source

Genetec (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refresources.genetec.com/security-advisories/critical-security-vulnerability-affecting-the-alpr-manager-role-of-security-centerrefressources.genetec.com/avis-de-securite/faille-de-securite-critique-affectant-le-role-gestionnaire-rapi-de-security-center