Genetec Sipelia CVE-2025-1790

Q: What is the CVSS score of CVE-2025-1790?

CVE-2025-1790 has a CVSS 4.0 base score of 5.8 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:X/V:C/RE:X/U:X. EPSS exploitation probability: 0.0%.

MEDIUM

Execution with Unnecessary Privileges (CWE-250)

2026-02-13 security@genetec.com

Privilege Escalation Microsoft

5.8

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.8 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:X/V:C/RE:X/U:X

vuln.today AI

7.8 HIGH

Local vector and low privileges required per description; AC:H reflects the CVSS 4.0 AT:P prerequisite condition; scope changed to capture subsequent-system compromise potential.

3.1 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 26, 2026 - 18:52 NVD

5.8 (MEDIUM)

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 13, 2026 - 17:16 cve.org

MEDIUM 5.8

CVE Published

Feb 13, 2026 - 17:16 nvd

N/A

DescriptionCVE.org

Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user could exploit this vulnerability to gain elevated privileges on the affected system.

AnalysisAI

Local privilege escalation in the Genetec Sipelia Plugin for Windows enables an authenticated low-privileged Windows user to gain fully elevated system privileges on the affected host. The vulnerability is rooted in CWE-250 (Execution with Unnecessary Privileges), where a Sipelia component operates with excess privileges that a local user can exploit. No public exploit or active exploitation has been identified at time of analysis, and EPSS is extremely low (0.02%), but the CVSS 4.0 subsequent-system scope (SC:H/SI:H/SA:H) signals that successful escalation could cascade to connected Genetec Security Center infrastructure.

Technical ContextAI

Genetec Sipelia is a communication management plugin that integrates with Genetec Security Center, an enterprise-grade physical security and video surveillance platform running on Windows. CWE-250 (Execution with Unnecessary Privileges) indicates the root cause is a Sipelia process or service component running with a privilege level exceeding what its function requires. A low-privileged Windows user interacting with this over-privileged component can leverage the privilege differential to escalate their own access. The CVSS 4.0 metric AT:P (Attack Target: Present) indicates a specific precondition must exist on the target system - not all Sipelia installations may expose this code path, suggesting the vulnerable component may only be reachable under certain feature states or configurations. No CPE strings were provided in the available intelligence, so the exact affected binary or service cannot be pinpointed without consulting the vendor advisory.

Affected ProductsAI

Genetec Sipelia Plugin for Windows is confirmed affected. The vendor security advisory URL references Sipelia version 2.14, indicating the vulnerability is present in the Sipelia 2.14 release line; versions preceding 2.14 may also be affected but are not independently confirmed from available intelligence. No CPE strings were provided, so a precise version boundary cannot be derived from NVD data alone. The vulnerability is Windows-specific and does not affect non-Windows deployments. The vendor advisory is available at https://techdocs.genetec.com/r/en-US/Security-Updates-for-SipeliaTM-2.14/.

RemediationAI

Consult the Genetec vendor advisory at https://techdocs.genetec.com/r/en-US/Security-Updates-for-SipeliaTM-2.14/ for the specific patched build and upgrade instructions; the advisory URL references the Sipelia 2.14 update series, but the exact fixed version must be confirmed from that page, as no precise patch version was present in the available intelligence. As compensating controls pending patch application, restrict local interactive logon rights on Sipelia-hosting Windows systems to only operationally required accounts using Group Policy (Deny log on locally), which directly eliminates the PR:L prerequisite. Additionally, apply the principle of least privilege to all Windows service accounts associated with Sipelia components to reduce the exploitable privilege differential. Monitor Windows Security event logs (Event IDs 4672, 4688) for unexpected privilege assignments or elevated token creation on Sipelia hosts. These controls reduce exposure but do not eliminate the underlying CWE-250 root cause.