CVE-2025-43027 | A critical severity vulnerability has been identified in the… | CVSS 9.8 CRITICAL

Description

A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to the Genetec Security Center system. The Genetec engineering team discovered this issue internally. There is currently no evidence that this vulnerability has been exploited in the wild.

Metadata

CVE ID: CVE-2025-43027
State: PUBLISHED
Assigner: Genetec
Reserved: 2025-04-16 14:08 UTC
Published: 2025-10-30 14:12 UTC
Last updated: 2026-02-26 16:56 UTC
Primary CWE: CWE-284
CWE-284: Improper Access Control
Vendor / Product: Genetec Inc. / Genetec Security Center
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
Genetec Inc.	Genetec Security Center	Windows	>=5.9.5.10, <5.9.5.10, >=5.10.4.29, >=5.10.0.0 <5.10.4.29 …

Weakness (CWE)

CWE	Source	Description
CWE-284	cna	CWE-284: Improper Access Control

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (2)