CVE-2025-1790 - Vulnerability Details - OpenCVE

Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user could exploit this vulnerability to gain elevated privileges on the affected system.

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact High

Subsequent System Integrity Impact High

Subsequent System Availability Impact High

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Genetec Inc.	Genetec Sipelia

No data.

No data.

References

Link	Providers
https://techdocs.genetec.com/r/en-US/Security-Updates-for-SipeliaTM-2.14/

History

Fri, 13 Feb 2026 22:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 13 Feb 2026 21:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Genetec Inc. Genetec Inc. genetec Sipelia
Vendors & Products		Genetec Inc. Genetec Inc. genetec Sipelia

Fri, 13 Feb 2026 17:15:00 +0000

Type	Values Removed	Values Added
Description		Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user could exploit this vulnerability to gain elevated privileges on the affected system.
Weaknesses		CWE-250
References		https://techdocs.genetec.com/r/en-US/Security-Updates-for-SipeliaTM-2.14/
Metrics		cvssV4_0 `{'score': 5.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:H/IR:H/AR:H/MVC:H/MVI:H/MVA:H/MSI:H/MSA:H/S:P/AU:N/V:C'}`

MITRE

Status: PUBLISHED

Assigner: Genetec

Published: 2026-02-13T16:45:06.539Z

Updated: 2026-02-13T21:11:48.160Z

Reserved: 2025-02-28T17:07:17.135Z

Link: CVE-2025-1790

Vulnrichment

Updated: 2026-02-13T21:11:43.976Z

NVD

Status : Awaiting Analysis

Published: 2026-02-13T17:16:10.917

Modified: 2026-02-13T21:43:11.137

Link: CVE-2025-1790

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-1790", "assignerOrgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8", "state": "PUBLISHED", "assignerShortName": "Genetec", "dateReserved": "2025-02-28T17:07:17.135Z", "datePublished": "2026-02-13T16:45:06.539Z", "dateUpdated": "2026-02-13T21:11:48.160Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8", "shortName": "Genetec", "dateUpdated": "2026-02-13T16:45:06.539Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-250", "description": "Execution with Unnecessary Privileges", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233: Privilege Escalation"}]}], "affected": [{"vendor": "Genetec Inc.", "product": "Genetec Sipelia", "platforms": ["Windows"], "versions": [{"status": "affected", "versionType": "semver", "version": "<2.14.271"}, {"status": "unaffected", "versionType": "semver", "version": ">=2.14.271"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user could exploit this vulnerability to gain elevated privileges on the affected system."}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"baseScore": 5.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:H/IR:H/AR:H/MVC:H/MVI:H/MVA:H/MSI:H/MSA:H/S:P/AU:N/V:C", "version": "4.0"}}], "solutions": [{"lang": "en", "value": "Hotfix 2.14.271 must be installed on client and server machines to resolve this issue. This issue will also be fixed in all later versions."}], "references": [{"url": "https://techdocs.genetec.com/r/en-US/Security-Updates-for-SipeliaTM-2.14/"}], "credits": [{"lang": "en", "type": "finder", "value": "Rutger Flohil"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-13T21:11:34.858558Z", "id": "CVE-2025-1790", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-13T21:11:48.160Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-1790", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-13T21:11:34.858558Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-13T21:11:43.976Z"}}], "cna": {"credits": [{"lang": "en", "type": "finder", "value": "Rutger Flohil"}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233: Privilege Escalation"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 5.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:H/IR:H/AR:H/MVC:H/MVI:H/MVA:H/MSI:H/MSA:H/S:P/AU:N/V:C"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Genetec Inc.", "product": "Genetec Sipelia", "versions": [{"status": "affected", "version": "<2.14.271", "versionType": "semver"}, {"status": "unaffected", "version": ">=2.14.271", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Hotfix 2.14.271 must be installed on client and server machines to resolve this issue. This issue will also be fixed in all later versions."}], "references": [{"url": "https://techdocs.genetec.com/r/en-US/Security-Updates-for-SipeliaTM-2.14/"}], "descriptions": [{"lang": "en", "value": "Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user could exploit this vulnerability to gain elevated privileges on the affected system."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-250", "description": "Execution with Unnecessary Privileges"}]}], "providerMetadata": {"orgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8", "shortName": "Genetec", "dateUpdated": "2026-02-13T16:45:06.539Z"}}}, "cveMetadata": {"cveId": "CVE-2025-1790", "state": "PUBLISHED", "dateUpdated": "2026-02-13T21:11:48.160Z", "dateReserved": "2025-02-28T17:07:17.135Z", "assignerOrgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8", "datePublished": "2026-02-13T16:45:06.539Z", "assignerShortName": "Genetec"}, "dataVersion": "5.2"}