Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sanitize input for the pubkey endpoint of the REST API. This could allow an authenticated remote administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
输入验证不恰当
Vulnerability Title
Siemens SiPass Integrated 输入验证错误漏洞
Vulnerability Description
Siemens SiPass Integrated是德国西门子（Siemens）公司的一个功能强大且极其灵活的门禁控制系统。 Siemens SiPass Integrated AC5102 ACC-G2和ACC-AP V6.4.9及之前版本存在输入验证错误漏洞，该漏洞源于REST API的pubkey端点上未正确清理输入，可能导致权限提升。
CVSS Information
N/A
Vulnerability Type
N/A