CVE-2024-52285

A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.8), SiPass integrated ACC-AP (All versions < V6.4.8). Affected devices expose several MQTT URLs without authentication. This could allow an unauthenticated remote attacker to access sensitive data.

Score

CVSS 4.0 6.9 Medium

Status

Deferred - productcert@siemens.com

Published

2025-03-11

Last modified

2025-03-11

Weaknesses

CWE-306

Affected products

• Sipass Integrated Ac5102 Acc-g2 (Siemens)
• Sipass Integrated Acc-ap (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-515903.html