Introduction
Unauthorized administrative access to a physical security system can undermine the integrity of an entire facility. A recent critical vulnerability in the ALPR Manager role of Genetec Security Center shows how improper access controls in a unified security platform can open that door.
About Genetec and Security Center: Genetec is a major vendor in the physical security industry. It sells unified security products covering video surveillance, access control, and automatic license plate recognition (ALPR). Enterprises and public-sector organizations around the world use its Security Center platform, which runs in thousands of deployments and supports critical infrastructure protection.
Technical information
CVE-2025-43027 is classified as an improper access control vulnerability (CWE-284) in the ALPR Manager role of Genetec Security Center. The flaw could allow an attacker to escalate privileges and obtain administrative access to the Security Center system. Genetec's engineering team found the vulnerability internally.
No further technical details, attack vectors, or vulnerable code snippets have been disclosed publicly. No public exploits or proof-of-concept code are known for this issue.
Affected systems and versions
- Product: Genetec Security Center
- Component: ALPR Manager role
- Specific affected versions or version ranges have not been disclosed in public sources as of this writing.
Vendor security history
Genetec has fixed critical and high-severity vulnerabilities in Security Center components before, including SQL injection and improper access control issues. The company runs a public bug bounty program and has shown a proactive approach to vulnerability management. It follows industry security frameworks such as the ACSC Essential Eight and regularly publishes security advisories and updates.
