CVE-2025-43027CWE-284broken-access-control

CVE-2025-43027

Critical · published October 30, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
29.2
In the wild
Unconfirmed
What it is

🚨 A critical flaw in the ALPR Manager role could give attackers the keys to the Genetec Security Center kingdom! 🔥 Think of this vulnerability as an unlocked vault in a security company, where anyone with a clever enough trick could stroll in and access sensitive information. Just like a security officer not verifying IDs at the entrance, this oversight allows undesirable access without proper checks. If exploited, an attacker could gain full administrative control over the Genetec Security Center, leading to unauthorized surveillance access, manipulation of security protocols, and potentially crippling the site’s overall security measures. The consequences could be absolutely devastating for any organization relying on this system!

Put simply

Think of this vulnerability as an unlocked vault in a security company, where anyone with a clever enough trick could stroll in and access sensitive information. Just like a security officer not verifying IDs at the entrance, this oversight allows undesirable access without proper checks. This vulnerability allows attackers to bypass essential authentication checks within the ALPR Manager role, potentially giving them administrative privileges in the Genetec Security Center without proper authorization.

What to do

If exploited, an attacker could gain full administrative control over the Genetec Security Center, leading to unauthorized surveillance access, manipulation of security protocols, and potentially crippling the site’s overall security measures. The consequences could be absolutely devastating for any organization relying on this system! Immediate action is essential: patch to the latest version released by Genetec as soon as it is available. Review access controls and ensure strict monitoring of any unusual activities in the system to minimize risks. Don't delay—time is of the essence! You've got this! Follow these steps, and you'll safeguard your system like a pro! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00365 · 29.2th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-10-30T19:15Z
References (2)
EPSS history
Timeline
  • 30 OCT 14:12Z
    A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to…
    cvelistv5