CVE-2024-52285 in SiPass integrated AC5102

Résumé

par MITRE • 11/03/2025

A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.8), SiPass integrated ACC-AP (All versions < V6.4.8). Affected devices expose several MQTT URLs without authentication. This could allow an unauthenticated remote attacker to access sensitive data.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsable: Siemens
• Réserver: 06/11/2024
• Divulgation: 11/03/2025
• Modérer: accepté
• Entrée: VDB-299244
• CPE: prêt
• CWE: CWE-306 (confirmé)
• CVSS: 5.3 (CNA)
• EPSS: 0.00316
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-52285
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-52285
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-52285/