Medium severity6.2NVD Advisory· Published May 23, 2025· Updated Jun 17, 2026
CVE-2022-31807
CVE-2022-31807
Description
A vulnerability has been identified in Building X - Security Manager Edge Controller (ACC-AP) (All versions). Affected devices do not properly check the integrity of firmware updates. This could allow a local attacker to upload a maliciously modified firmware onto the device. In a second scenario, a remote attacker who is able to intercept the transfer of a valid firmware from the server to the device could modify the firmware "on the fly".
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4All versions+ 1 more
- (no CPE)range: All versions
- (no CPE)range: 0
- cpe:2.3:o:siemens:sipass_integrated_ac5102_\(acc-g2\)_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:sipass_integrated_acc-ap_firmware:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.