Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
输入验证不恰当
Vulnerability Title
Siemens SiPass Integrated 输入验证错误漏洞
Vulnerability Description
Siemens SiPass Integrated是德国西门子（Siemens）公司的一个功能强大且极其灵活的门禁控制系统。 Siemens SiPass Integrated AC5102 (ACC-G2)和SiPass integrated ACC-AP存在输入验证错误漏洞，该漏洞源于未正确清理telnet命令行界面上的用户输入，经过身份验证的攻击者利用该漏洞可以通过注入以root权限执行的任意命令来提升权限。
CVSS Information
N/A
Vulnerability Type
N/A