SSA-599451: Multiple Vulnerabilities in SiPass integrated
SiPass integrated contains multiple vulnerabilities that could allow an unauthenticated remote attacker to exploit user accounts, manipulate data, impersonate users, or achieve arbitrary code execution on the SiPass integrated server. Siemens has released a new version for SiPass integrated and recommends to update to the latest version.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40774US | — | — | ||
A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user passwords encrypted in its database. Decryption keys are acc… | ||||
| CVE-2025-40773US | medium5.3 | — | ||
A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications contains a broken access control vulnerability. The authorization mecha… | ||||
| CVE-2025-40772US | medium6.1 | — | ||
A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications are vulnerable to stored Cross-Site Scripting (XSS), allowing an attack… | ||||
| CVE-2023-35002US | critical9.8 | — | ||
A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution… | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- MitigationSiPass integrated
Restrict access to authorized and trusted personal only
- MitigationSiPass integrated
Restrict access to authorized and trusted personal only
- MitigationSiPass integrated
Restrict access to authorized and trusted personal only
- MitigationSiPass integrated V2.95
Restrict access to authorized and trusted personal only
- FixedSiPass integrated
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995331/ - FixedSiPass integrated
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995331/ - FixedSiPass integrated
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995331/ - FixedSiPass integrated V2.95
Update to V2.95.3.23 or later version
https://support.industry.siemens.com/cs/ww/en/view/109827049/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan