CVE-2022-31808
Last modified
CVE-2022-31808 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Sipass Integrated Acc-Ap Firmware | < 2.85.43 |
| Siemens | Sipass Integrated Ac5102 \(Acc-G2\) Firmware | < 2.85.44 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-31808?
How severe is CVE-2022-31808?
How do I fix CVE-2022-31808?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-31802In CODESYS Gateway Server V2 for versions prior to V2.3.9.38…9.8
- CVE-2022-31803In CODESYS Gateway Server V2 an insufficient check for the a…5.3
- CVE-2022-31804The CODESYS Gateway Server V2 does not verifiy that the size…7.5
- CVE-2022-31805In the CODESYS Development System multiple components in mul…7.5
- CVE-2022-31806In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions pr…9.8
- CVE-2022-31807A vulnerability has been identified in Building X - Security…5.5
- CVE-2022-3181An Improper Input Validation vulnerability exists in Trihedr…7.5
- CVE-2022-31810A vulnerability has been identified in SiPass integrated (Al…7.5
- CVE-2022-31812A vulnerability has been identified in SiPass integrated (Al…8.7
- CVE-2022-31813Apache HTTP Server 2.4.53 and earlier may not send the X-For…9.8
- CVE-2022-31814pfSense pfBlockerNG through 2.1.4_26 allows remote attackers…9.8
- CVE-2022-3182Improper Access Control vulnerability in the Duo SMS two-fac…7
Are you affected by CVE-2022-31808?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST