Siemens SiPass Integrated
SiPass integrated contains multiple vulnerabilities that could allow an unauthenticated remote attacker to access or modify several internal application resources. Siemens has released a tool, "SiPass integrated Component Manager", to remediate the vulnerabilities on all maintained and supported versions of SiPass integrated and recommends to apply this tool.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-44524US | critical9.8 | — | ||
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity… | ||||
| CVE-2021-44523US | critical9.1 | — | ||
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity… | ||||
| CVE-2021-44522US | high7.5 | — | ||
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity… | ||||
references
External citations — patches, advisories, analysis.
- SSA-160202: Multiple Access Control Vulnerabilities in SiPass Integrated - CSAF Versionself
- SSA-160202: Multiple Access Control Vulnerabilities in SiPass Integrated - PDF Versionself
- SSA-160202: Multiple Access Control Vulnerabilities in SiPass Integrated - TXT Versionself
- ICS Advisory ICSA-21-350-19 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-350-19 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (9)
- FixedSiPass integrated V2.76
Update to V2.76 SP2 and then download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/
- FixedSiPass integrated V2.76
Update to V2.76 SP2 and then download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/
- FixedSiPass integrated V2.76
Update to V2.76 SP2 and then download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/
- FixedSiPass integrated V2.80
Download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/
- FixedSiPass integrated V2.80
Download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/
- FixedSiPass integrated V2.80
Download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/
- FixedSiPass integrated V2.85
Download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/
- FixedSiPass integrated V2.85
Download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/
- FixedSiPass integrated V2.85
Download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan