CVE-2017-9940
HighSummary
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network.
Risk Assessment
This vulnerability could lead to unauthorized access to data on the server, posing a risk of information leakage or file modification.
Recommendation
It is recommended to upgrade to version V2.70 or later to mitigate this vulnerability and to restrict access to low-privileged user accounts.
Other vulnerabilities in Siemens SiPass integrated
See all- CVE-2017-9942High
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems.
- CVE-2017-9941High
A vulnerability was discovered in Siemens SiPass integrated (all versions before V2.70) that could allow an attacker in a Man-in-the-Middle position to read or modify the network communication between the SiPass integrated server and SiPass integrated clients.
- CVE-2017-9939Critical
A vulnerability was discovered in Siemens SiPass integrated (all versions before V2.70) that could allow an attacker with network access to bypass the authentication mechanism and perform administrative operations.
Original NVD description (English source)
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network.