9.1
Critique
CVE-2025-27494 A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated…
Description
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sanitize input for the pubkey endpoint of the REST API. This could allow an authenticated remote administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SiPass integrated AC5102 (ACC-G2) 6.4 | premières → < 6.4.9 | 6.4.9 |
| SiPass integrated ACC-AP 6.4 | premières → < 6.4.9 | 6.4.9 |
Autres CVE de SiPass integrated AC5102 (ACC-G2)
Les 4 CVE de SiPass integrated AC5102 (ACC-G2) →
CVE-2025-27493
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated…
8.2
Élevée
CVE-2024-52285
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.8), SiPass integrated…
5.3
Moyenne
CVE-2022-31808
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated…
7.8
Élevée