CVE-2022-31807
Medium
Description
A vulnerability has been identified in Building X - Security Manager Edge Controller (ACC-AP) (All versions). Affected devices do not properly check the integrity of firmware updates. This could allow a local attacker to upload a maliciously modified firmware onto the device. In a second scenario, a remote attacker who is able to intercept the transfer of a valid firmware from the server to the device could modify the firmware "on the fly".
SeverityMedium
CVSS6.2
Exploit probability—
ProductSiemens Sipass Integrated Ac5102 \(acc-g2\) Firmware
PublishedMay 23, 2025
First seenMay 23, 2025
Weakness typeCWE-347CWE-347
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens sipass_integrated_ac5102_\(acc-g2\)_firmware | No range specified | — |
| siemens sipass_integrated_acc-ap_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.