Sipass Integrated Security Vulnerabilities and Issues — Sipass Integrated CVE List

Lucene search

SiemensSipass Integrated

12 matches found

CVE•added 2021/12/10 10:15 a.m.•5651 views

CVE-2021-44228

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message ...

10CVSS10AI score0.94358EPSS

CVE•added 2022/04/01 11:15 p.m.•2209 views

CVE-2022-22965

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is...

9.8CVSS8.7AI score0.9446EPSS

CVE•added 2021/12/14 7:15 p.m.•1540 views

CVE-2021-45046

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context L...

9CVSS9.7AI score0.94358EPSS

CVE•added 2017/08/08 12:29 a.m.•60 views

CVE-2017-9942

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems.

7.8CVSS7.3AI score0.00046EPSS

CVE•added 2017/08/08 12:29 a.m.•51 views

CVE-2017-9940

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network.

8.1CVSS7.7AI score0.00178EPSS

CVE•added 2023/07/11 10:15 a.m.•48 views

CVE-2022-31810

A vulnerability has been identified in SiPass integrated (All versions

7.5CVSS7.5AI score0.00345EPSS

CVE•added 2017/08/08 12:29 a.m.•41 views

CVE-2017-9939

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with network access to the SiPass integrated server to bypass the authentication mechanism and perform administrative operations.

9.8CVSS9.3AI score0.0206EPSS

CVE•added 2012/11/01 10:44 a.m.•40 views

CVE-2012-5409

AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages received over an Ethernet network, which allows remote attackers to write data to any memory location and consequently execute arbitrary code via crafted messages, as demonstrated ...

10CVSS8.2AI score0.35376EPSS

CVE•added 2017/08/08 12:29 a.m.•35 views

CVE-2017-9941

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker in a Man-in-the-Middle position between the SiPass integrated server and SiPass integrated clients to read or modify the network communication.

7.4CVSS7.1AI score0.00194EPSS

CVE•added 2021/12/14 12:15 p.m.•32 views

CVE-2021-44523

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), Siveillance Identity V1.6 (All versions

9.1CVSS8.9AI score0.0042EPSS

CVE•added 2021/12/14 12:15 p.m.•31 views

CVE-2021-44524

9.8CVSS9.4AI score0.00582EPSS

CVE•added 2021/12/14 12:15 p.m.•30 views

CVE-2021-44522

7.5CVSS7.5AI score0.00432EPSS