Siemens SiPass Integrated
view advisory published 2023-07-11
SiPass integrated versions before V2.90.3.8 contain a stack overflow vulnerability that could allow an unauthenticated remote attacker to crash the server application, creating a denial of service condition. Siemens has released an update for SiPass integrated and recommends to update to the latest version.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-31810US | high7.5 | — | ||
A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications improperly check the size of data packets received for the configu… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-924149: Stack Overflow Vulnerability in SiPass Integrated before V2.90.3.8 - CSAF Versionself
- SSA-924149: Stack Overflow Vulnerability in SiPass Integrated before V2.90.3.8 - HTML Versionself
- SSA-924149: Stack Overflow Vulnerability in SiPass Integrated before V2.90.3.8 - PDF Versionself
- SSA-924149: Stack Overflow Vulnerability in SiPass Integrated before V2.90.3.8 - TXT Versionself
- ICS Advisory ICSA-23-194-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-194-02 - Web Versionself
- Recommended Practicesexternal
03
remediations (1)
- FixedSiPass integrated
Update to V2.90.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814044/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan