Siemens SiPass Integrated
Advisory ansehen veröffentlicht 2023-07-11
SiPass integrated versions before V2.90.3.8 contain a stack overflow vulnerability that could allow an unauthenticated remote attacker to crash the server application, creating a denial of service condition. Siemens has released an update for SiPass integrated and recommends to update to the latest version.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-31810US | high7.5 | — | ||
A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications improperly check the size of data packets received for the configu… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-924149: Stack Overflow Vulnerability in SiPass Integrated before V2.90.3.8 - CSAF Versionself
- SSA-924149: Stack Overflow Vulnerability in SiPass Integrated before V2.90.3.8 - HTML Versionself
- SSA-924149: Stack Overflow Vulnerability in SiPass Integrated before V2.90.3.8 - PDF Versionself
- SSA-924149: Stack Overflow Vulnerability in SiPass Integrated before V2.90.3.8 - TXT Versionself
- ICS Advisory ICSA-23-194-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-194-02 - Web Versionself
- Recommended Practicesexternal
03
Behebungen (1)
- BehobenSiPass integrated
Update to V2.90.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814044/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan