Risk Scores
CVSS v3.1
6.199999809265137
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SiPass integrated ACC-AP | ||
| SiPass integrated AC5102 (ACC-G2) |
Timeline
- May 23, 2025 CVE Published
- Oct 14, 2025 CVE Updated
SiPass integrated ACC (Advanced Central Controller) devices do not properly check the integrity of firmware updates. This could allow an attacker to upload a maliciously modified firmware onto the device. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
| Vendor | Product | Versions |
|---|---|---|
| SiPass integrated ACC-AP | ||
| SiPass integrated AC5102 (ACC-G2) |