SSA-420375 — Vulnetix

SSA-420375 PUBLISHED CVSS 6.199999809265137 MEDIUM

Building X - Security Manager Edge Controller (ACC-AP) devices do not properly check the integrity of firmware updates. This could allow an attacker to upload a maliciously modified firmware onto the device. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Risk Scores

CVSS 3.1

6.199999809265137

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Products

Vendor	Product	Versions
	Building X - Security Manager Edge Controller (ACC-AP)

Exploit Intelligence

https://cert-portal.siemens.com/productcert/html/ssa-420375.html (circl)
https://cert-portal.siemens.com/productcert/csaf/ssa-420375.json (circl)

Timeline

Dec 9, 2025 CVE Published

References

https://cert-portal.siemens.com/productcert/html/ssa-420375.html advisory
https://cert-portal.siemens.com/productcert/csaf/ssa-420375.json advisory

Open in Interactive Console →