VDB
CVE-2022-31807
CVE-2022-31807
PUBLISHED
CVSS 6.199999809265137 MEDIUM
A vulnerability has been identified in Building X - Security Manager Edge Controller (ACC-AP) (All versions). Affected devices do not properly check the integrity of firmware updates. This could allow a local attacker to upload a maliciously modified firmware onto the device. In a second scenario, a remote attacker who is able to intercept the transfer of a valid firmware from the server to the device could modify the firmware "on the fly".
EPSS 0.07% · 20.5th percentile
Risk Scores
CVSS v3.1
6.199999809265137
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.07%
20.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| siemens | sipass_integrated_ac5102_\(acc-g2\)_firmware | |
| siemens | sipass_integrated_acc-ap_firmware | |
| Siemens | Building X - Security Manager Edge Controller (ACC-AP) | 0 |
Timeline
- May 23, 2025 CVE Published
- May 24, 2025 EPSS Score
- May 29, 2025 PoC Published
- Jun 4, 2025 EPSS Score
- Jun 14, 2025 EPSS Score
- Jun 25, 2025 EPSS Score
- Jul 5, 2025 EPSS Score
- Jul 16, 2025 EPSS Score
- Jul 26, 2025 EPSS Score
- Aug 6, 2025 EPSS Score
- Aug 16, 2025 EPSS Score
- Aug 27, 2025 EPSS Score