SSA-463116: Multiple Access Control Vulnerabilities in Siveillance Identity before V1.6.284.0
Siveillance Identity contains multiple vulnerabilities that could allow an unauthenticated remote attacker to access or modify several internal application resources. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-44524US | critical9.8 | — | ||
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity… | ||||
| CVE-2021-44523US | critical9.1 | — | ||
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity… | ||||
| CVE-2021-44522US | high7.5 | — | ||
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity… | ||||
references
External citations — patches, advisories, analysis.
- SSA-463116: Multiple Access Control Vulnerabilities in Siveillance Identity before V1.6.284.0 - CSAF Versionself
- SSA-463116: Multiple Access Control Vulnerabilities in Siveillance Identity before V1.6.284.0 - PDF Versionself
- SSA-463116: Multiple Access Control Vulnerabilities in Siveillance Identity before V1.6.284.0 - TXT Versionself
remediations (6)
- FixedSiveillance Identity V1.5
Update to V1.5 SP4 and apply the Credential Patch Tool: https://support.industry.siemens.com/cs/ww/en/view/109801824/
- FixedSiveillance Identity V1.5
Update to V1.5 SP4 and apply the Credential Patch Tool: https://support.industry.siemens.com/cs/ww/en/view/109801824/
- FixedSiveillance Identity V1.5
Update to V1.5 SP4 and apply the Credential Patch Tool: https://support.industry.siemens.com/cs/ww/en/view/109801824/
- FixedSiveillance Identity V1.6
Update to V1.6.284.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801819/ - FixedSiveillance Identity V1.6
Update to V1.6.284.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801819/ - FixedSiveillance Identity V1.6
Update to V1.6.284.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801819/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan