CVE-2017-9941
HighSummary
A vulnerability was discovered in Siemens SiPass integrated (all versions before V2.70) that could allow an attacker in a Man-in-the-Middle position to read or modify the network communication between the SiPass integrated server and SiPass integrated clients.
Risk Assessment
This vulnerability poses a risk of interception or manipulation of data transmitted over the network, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade to version V2.70 or later to mitigate this vulnerability and secure network communication.
Other vulnerabilities in Siemens SiPass integrated
See all- CVE-2017-9942High
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems.
- CVE-2017-9940High
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network.
- CVE-2017-9939Critical
A vulnerability was discovered in Siemens SiPass integrated (all versions before V2.70) that could allow an attacker with network access to bypass the authentication mechanism and perform administrative operations.
Original NVD description (English source)
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker in a Man-in-the-Middle position between the SiPass integrated server and SiPass integrated clients to read or modify the network communication.