CVE-2025-43027

Summary

A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to the Genetec Security Center system. The Genetec engineering team discovered this issue internally. There is currently no evidence that this vulnerability has been exploited in the wild.

Affected Software

VendorProductVersion RangeStatus
Genetec Inc.Genetec Security Center>=5.9.5.10unaffected
Genetec Inc.Genetec Security Center<5.9.5.10affected
Genetec Inc.Genetec Security Center>=5.10.4.29unaffected
Genetec Inc.Genetec Security Center>=5.10.0.0 <5.10.4.29affected
Genetec Inc.Genetec Security Center>=5.11.3.25unaffected
Genetec Inc.Genetec Security Center>=5.11.0.0 <5.11.3.25affected
Genetec Inc.Genetec Security Center>=5.12.2.12unaffected
Genetec Inc.Genetec Security Center>=5.12.0.0 <5.12.2.12affected
Genetec Inc.Genetec Security Center>=5.13.2.3unaffected
Genetec Inc.Genetec Security Center>=5.13.0.0 <5.13.2.3affected

Weaknesses

  • CWE-284: CWE-284: Improper Access Control

Workarounds

If the ALPR Manager role must be used and the Security Center instance cannot be updated promptly, the system administrator should reduce exposure to the system. This can be done by restricting network access to trusted sources and enforcing secure connectivity measures, such as VPN or equivalent controls.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References