CVE-2017-9939

Siemens SiPass integrated (all versions before V2.70) contains an authentication bypass vulnerability (CVE-2017-9939) that could be exploited by an unauthenticated attacker with network access to bypass authentication on the SiPass server and perform administrative operations. Connected advisorie...

Siemens Patches Authentication Bypass Flaw in SiPass Server

A handful of vulnerabilities in Siemens’ SiPass integrated server have been patched, including one that allows an attacker to bypass authentication on the box. SiPass is the company’s integrated access control server managing physical access in a number of industries and use cases. The product...