Summary
SiPass integrated contains multiple vulnerabilities that could allow an unauthenticated remote attacker to exploit user accounts, manipulate data, impersonate users, or achieve arbitrary code execution on the SiPass integrated server.
Siemens has released a new version for SiPass integrated and recommends to update to the latest version.
Vulnerabilities 4
-
Critical 9.8
A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A speciall…
-
High 7.4
A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications are vulner…
-
Medium 4.4
A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user…
-
Low 3.5
A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications contains a…
Revision history
-
#3
CISA Republication update based on Siemens ProductCERT SSA-599451 advisory
-
#2
Added fix version V2.95 IR23 for CVE-2023-35002
-
#1
Publication Date
References
-
SSA-599451: Multiple Vulnerabilities in SiPass integrated - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-599451.html
-
ICS Advisory ICSA-25-289-06 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-289-06
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b