Paper/Archive/CVE-2021-44523

CVE-2021-44523

Siemens SiPass integrated V2.76 — A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated…

EPSS 1%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 72.6.726 × 2014.5 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), Siveillance Identity V1.6 (All versions < V1.6.284.0). Affected applications insufficiently limit the access to the internal activity feed database. This could allow an unauthenticated remote attacker to read, modify or delete activity feed entries.

Affected

ProductAffectedFixed inSource

SiPass integrated V2.76All versions–CNA

SiPass integrated V2.80All versions–CNA

SiPass integrated V2.85All versions–CNA

Siveillance Identity V1.5All versions–CNA

Siveillance Identity V1.6All versions < V1.6.284.0–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refcert-portal.siemens.com/productcert/pdf/ssa-463116.pdf refcert-portal.siemens.com/productcert/pdf/ssa-160202.pdf