SSA-599451: Multiple Vulnerabilities in SiPass integrated
SiPass integrated contains multiple vulnerabilities that could allow an unauthenticated remote attacker to exploit user accounts, manipulate data, impersonate users, or achieve arbitrary code execution on the SiPass integrated server. Siemens has released a new version for SiPass integrated and recommends to update to the latest version.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40774US | — | — | ||
A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user passwords encrypted in its database. Decryption keys are acc… | ||||
| CVE-2025-40773US | medium5.3 | — | ||
A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications contains a broken access control vulnerability. The authorization mecha… | ||||
| CVE-2025-40772US | medium6.1 | — | ||
A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications are vulnerable to stored Cross-Site Scripting (XSS), allowing an attack… | ||||
| CVE-2023-35002US | critical9.8 | — | ||
A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (8)
- MitigationSiPass integrated
Restrict access to authorized and trusted personal only
- MitigationSiPass integrated
Restrict access to authorized and trusted personal only
- MitigationSiPass integrated
Restrict access to authorized and trusted personal only
- MitigationSiPass integrated V2.95
Restrict access to authorized and trusted personal only
- BehobenSiPass integrated
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995331/ - BehobenSiPass integrated
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995331/ - BehobenSiPass integrated
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995331/ - BehobenSiPass integrated V2.95
Update to V2.95.3.23 or later version
https://support.industry.siemens.com/cs/ww/en/view/109827049/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan