Command Injection Vulnerability in SiPass Integrated Access Control Devices

CVE-2022-31808

What is CVE-2022-31808?

A command injection vulnerability exists in the SiPass integrated AC5102 (ACC-G2) and ACC-AP access control devices due to inadequate sanitization of user input on the telnet command line interface. This security flaw enables an authenticated attacker to execute arbitrary commands with root privileges, potentially leading to unauthorized access and control over the affected systems. Organizations using these devices should implement immediate measures to secure their installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References