CVE-2017-9942
HighSummary
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems.
Risk Assessment
An attacker with local access could obtain sensitive credentials, potentially leading to unauthorized access to the organization's systems.
Recommendation
It is recommended to upgrade to version V2.70 or later to mitigate this vulnerability.
Other vulnerabilities in Siemens SiPass integrated
See all- CVE-2017-9941High
A vulnerability was discovered in Siemens SiPass integrated (all versions before V2.70) that could allow an attacker in a Man-in-the-Middle position to read or modify the network communication between the SiPass integrated server and SiPass integrated clients.
- CVE-2017-9940High
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network.
- CVE-2017-9939Critical
A vulnerability was discovered in Siemens SiPass integrated (all versions before V2.70) that could allow an attacker with network access to bypass the authentication mechanism and perform administrative operations.
Original NVD description (English source)
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems.