CVE-2017-9939
CriticalSummary
A vulnerability was discovered in Siemens SiPass integrated (all versions before V2.70) that could allow an attacker with network access to bypass the authentication mechanism and perform administrative operations.
Risk Assessment
An attacker with network access could gain unauthorized access to the system, potentially leading to serious security breaches and loss of control over the system.
Recommendation
It is recommended to upgrade to version V2.70 or later to mitigate this vulnerability and implement additional security measures for server access.
Other vulnerabilities in Siemens SiPass integrated
See all- CVE-2017-9942High
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems.
- CVE-2017-9941High
A vulnerability was discovered in Siemens SiPass integrated (all versions before V2.70) that could allow an attacker in a Man-in-the-Middle position to read or modify the network communication between the SiPass integrated server and SiPass integrated clients.
- CVE-2017-9940High
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network.
Original NVD description (English source)
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with network access to the SiPass integrated server to bypass the authentication mechanism and perform administrative operations.