CVE-2022-31808: Input Validation
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-31808?
CVE-2022-31808 is considered a high severity vulnerability due to the potential for privilege escalation in affected devices.
How do I fix CVE-2022-31808?
To mitigate CVE-2022-31808, update the firmware of affected devices to versions V2.85.44 or later for SiPass integrated AC5102 and to V2.85.43 or later for SiPass integrated ACC-AP.
Which versions are affected by CVE-2022-31808?
CVE-2022-31808 affects SiPass integrated AC5102 devices running versions prior to V2.85.44 and SiPass integrated ACC-AP devices running versions prior to V2.85.43.
What type of attack can exploit CVE-2022-31808?
CVE-2022-31808 can be exploited by an authenticated user leveraging improper input sanitization on the telnet command line interface to escalate privileges.
Are there any known exploits for CVE-2022-31808?
As of now, there are no widely reported exploits specifically targeting CVE-2022-31808, but the vulnerability does pose a risk of privilege escalation.