ICSA-25-072-04

icsaUScisa_csaf_ot

Siemens SiPass integrated AC5102/ACC-G2 and ACC-AP

view advisory published 2025-03-11

SiPass integrated ACC (Advanced Central Controller) devices contain multiple vulnerabilities that could allow attackers to execute commands on the devices with root privileges and access sensitive data. Siemens has released new versions for the affected products and recommends to update to the latest versions.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2025-27494UShigh7.2—
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sani…
CVE-2025-27493USmedium6.7—
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sani…
CVE-2024-52285US—OT elevated—
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.8), SiPass integrated ACC-AP (All versions < V6.4.8). Affected devices expose several…
02

references

External citations — patches, advisories, analysis.

03

remediations (10)

  • MitigationSiPass integrated AC5102 (ACC-G2)

    Set an individual strong password for the administrator account ("SIEMENS")

  • MitigationSiPass integrated AC5102 (ACC-G2)

    Set an individual strong password for the administrator account ("SIEMENS")

  • MitigationSiPass integrated ACC-AP

    Set an individual strong password for the administrator account ("SIEMENS")

  • MitigationSiPass integrated ACC-AP

    Set an individual strong password for the administrator account ("SIEMENS")

  • FixedSiPass integrated AC5102 (ACC-G2)

    Update to V6.4.8 or later version

  • FixedSiPass integrated AC5102 (ACC-G2)

    Update to V6.4.9 or later version

  • FixedSiPass integrated AC5102 (ACC-G2)

    Update to V6.4.9 or later version

  • FixedSiPass integrated ACC-AP

    Update to V6.4.8 or later version

  • FixedSiPass integrated ACC-AP

    Update to V6.4.9 or later version

  • FixedSiPass integrated ACC-AP

    Update to V6.4.9 or later version

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan