CVE-2022-31808

State: Published
Severity: 7.8 High
Published: Feb 14, 2023
Updated: Mar 20, 2025
Reserved: May 30, 2022

Description

A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface.

This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C	siemens

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
SiPass integrated AC5102 (ACC-G2)Siemens	All versions < V2.85.44Affected
SiPass integrated ACC-APSiemens	All versions < V2.85.43Affected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-658793.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.