SSA-515903

csafDEsiemens_psirt

SSA-515903: Multiple Vulnerabilities in SiPass integrated AC5102 / ACC-G2 and ACC-AP

Advisory ansehen veröffentlicht 2025-03-11

SiPass integrated ACC (Advanced Central Controller) devices contain multiple vulnerabilities that could allow attackers to execute commands on the devices with root privileges and access sensitive data. Siemens has released new versions for the affected products and recommends to update to the latest versions.

01

beschreibt (3)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-27494UShigh7.2—
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sani…
CVE-2025-27493USmedium6.7—
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sani…
CVE-2024-52285US—OT erhöht—
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.8), SiPass integrated ACC-AP (All versions < V6.4.8). Affected devices expose several…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (10)

  • MitigationSiPass integrated AC5102 (ACC-G2)

    Set an individual strong password for the administrator account ("SIEMENS")

  • MitigationSiPass integrated AC5102 (ACC-G2)

    Set an individual strong password for the administrator account ("SIEMENS")

  • MitigationSiPass integrated ACC-AP

    Set an individual strong password for the administrator account ("SIEMENS")

  • MitigationSiPass integrated ACC-AP

    Set an individual strong password for the administrator account ("SIEMENS")

  • BehobenSiPass integrated AC5102 (ACC-G2)

    Update to V6.4.8 or later version

  • BehobenSiPass integrated AC5102 (ACC-G2)

    Update to V6.4.9 or later version

  • BehobenSiPass integrated AC5102 (ACC-G2)

    Update to V6.4.9 or later version

  • BehobenSiPass integrated ACC-AP

    Update to V6.4.8 or later version

  • BehobenSiPass integrated ACC-AP

    Update to V6.4.9 or later version

  • BehobenSiPass integrated ACC-AP

    Update to V6.4.9 or later version

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan