CyberzSOC

Publication detail
← Back to advisories & guidance

ICSA-25-072-04: Siemens SiPass integrated AC5102/ACC-G2 and ACC-AP ↗ source

March 13, 2025 CISA ICS Advisory
Source: https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-04

Summary

SiPass integrated ACC (Advanced Central Controller) devices contain multiple vulnerabilities that could allow attackers to execute commands on the devices with root privileges and access sensitive data. Siemens has released new versions for the affected products and recommends to update to the latest versions. CVE-2024-52285: Affected devices expose several MQTT URLs without authentication. This could allow an unauthenticated remote attacker to access sensitive data. CVE-2025-27493: Affected devices improperly sanitize user input for specific commands on the telnet command line interface. This could allow an authenticated local administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges. CVE-2025-27494: Affected devices improperly sanitize input for the pubkey endpoint of the REST API. This could allow an authenticated remote administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges.

Advisory Details CISA ICS CSAF feed

Advisory ID
ICSA-25-072-04
Status
Final · version 2
Initial release
2025-03-11
Last revised
2025-05-06 (2 revisions)
Vendor
Siemens
Critical infrastructure sectors
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities
Deployed
Worldwide
Vendor headquarters
Germany

Republished vendor advisory. This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.

General Recommendations: As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.

Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

Credit: Airbus Security

Affected products (2)
  • SiPass integrated AC5102 (ACC-G2) — <V6.4.8, <V6.4.9
  • SiPass integrated ACC-AP — <V6.4.8, <V6.4.9
Revision history (2)
  • 2025-05-06 — v2: Revision - Fixing typos
  • 2025-03-11 — v1: Publication Date

From CISA's machine-readable CSAF 2.0 advisory (JSON).

Vulnerabilities as Stated by the Advisory

CVEWeaknessCVSS v3Details
CVE-2025-27494 CWE-20 Improper Input Validation 9.1 Critical CVE-2025-27494
Affected devices improperly sanitize input for the pubkey endpoint of the REST API. This could allow an authenticated remote administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges.

Mitigation: Set an individual strong password for the administrator account ("SIEMENS")

Vendor fix: Update to V6.4.9 or later version

Affected, fixed & timeline

Affected:

  • SiPass integrated AC5102 (ACC-G2) <V6.4.9
  • SiPass integrated ACC-AP <V6.4.9
CVE-2025-27493 CWE-20 Improper Input Validation 8.2 High CVE-2025-27493
Affected devices improperly sanitize user input for specific commands on the telnet command line interface. This could allow an authenticated local administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges.

Mitigation: Set an individual strong password for the administrator account ("SIEMENS")

Vendor fix: Update to V6.4.9 or later version

Affected, fixed & timeline

Affected:

  • SiPass integrated AC5102 (ACC-G2) <V6.4.9
  • SiPass integrated ACC-AP <V6.4.9
CVE-2024-52285 CWE-306 Missing Authentication for Critical Function 5.3 Medium CVE-2024-52285
Affected devices expose several MQTT URLs without authentication. This could allow an unauthenticated remote attacker to access sensitive data.

Vendor fix: Update to V6.4.8 or later version

Affected, fixed & timeline

Affected:

  • SiPass integrated AC5102 (ACC-G2) <V6.4.8
  • SiPass integrated ACC-AP <V6.4.8

Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVECVSSAffected
CVE-2025-27494 9.1 Critical Siemens SiPass integrated AC5102 (ACC-G2) A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). A…
CVE-2025-27493 8.2 High Siemens SiPass integrated AC5102 (ACC-G2) A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). A…
CVE-2024-52285 5.3 Medium Siemens SiPass integrated AC5102 (ACC-G2) A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.8), SiPass integrated ACC-AP (All versions < V6.4.8). A…

Named by the advisory itself. Each CVE links to its tracked detail page.

Vendors Named in This Publication

Siemens 2 KEV

Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.