Siemens SiPass Integrated Privilege Escalation Vulnerability in Telnet CLI

A vulnerability exists in Siemens SiPass integrated AC5102 (ACC-G2) and ACC-AP, all versions prior to 6.4.9. The issue arises because the devices do not properly sanitize user input for certain commands in the telnet command line interface. This flaw could enable an authenticated local administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an authenticated local administrator to execute commands with root privileges on the affected device.

Remediation

Siemens has released version 6.4.9 for both affected products. Users are advised to update to this version. Additionally, it is recommended to set a strong, individual password for the administrator account.