Siemens SiPass integrated vulnerabilities

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems.

A vulnerability was discovered in Siemens SiPass integrated (all versions before V2.70) that could allow an attacker in a Man-in-the-Middle position to read or modify the network communication between the SiPass integrated server and SiPass integrated clients.

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network.

A vulnerability was discovered in Siemens SiPass integrated (all versions before V2.70) that could allow an attacker with network access to bypass the authentication mechanism and perform administrative operations.