VDB
CVE-2022-31807
CVE-2022-31807
PUBLISHED
CVSS 6.199999809265137 MEDIUM
A vulnerability has been identified in Building X - Security Manager Edge Controller (ACC-AP) (All versions). Affected devices do not properly check the integrity of firmware updates. This could allow a local attacker to upload a maliciously modified firmware onto the device. In a second scenario, a remote attacker who is able to intercept the transfer of a valid firmware from the server to the device could modify the firmware "on the fly".
EPSS 0.07% · 20.9th percentile
Risk Scores
CVSS 3.1
6.199999809265137
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.07%
20.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| siemens | sipass_integrated_ac5102_\(acc-g2\)_firmware | |
| siemens | sipass_integrated_acc-ap_firmware | |
| Siemens | Building X - Security Manager Edge Controller (ACC-AP) | 0 |
Timeline
- May 23, 2025 CVE Published
- May 24, 2025 EPSS Score
- May 29, 2025 PoC Published
- Jun 4, 2025 EPSS Score
- Jun 15, 2025 EPSS Score
- Jun 26, 2025 EPSS Score
- Jul 7, 2025 EPSS Score
- Jul 19, 2025 EPSS Score
- Jul 30, 2025 EPSS Score
- Aug 10, 2025 EPSS Score
- Aug 21, 2025 EPSS Score
- Sep 1, 2025 EPSS Score