High SSA-599451 4 CVEs

SSA-599451: Multiple Vulnerabilities in SiPass integrated

Published Oct 14, 2025 · Updated Feb 10, 2026 · Revision 2

Vendor: Siemens Product: SiPass integrated Product: SiPass integrated V2.95

Summary

SiPass integrated contains multiple vulnerabilities that could allow an unauthenticated remote attacker to exploit user accounts, manipulate data, impersonate users, or achieve arbitrary code execution on the SiPass integrated server.

Siemens has released a new version for SiPass integrated and recommends to update to the latest version.

Vulnerabilities 4

Critical 9.8

CVE-2023-35002

A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A speciall…

Accusoft ImageGear

Sep 25, 2023
High 7.4

CVE-2025-40772

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications are vulner…

Siemens SiPass integrated ICS / OT

Oct 14, 2025
Medium 4.4

CVE-2025-40774

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user…

Siemens SiPass integrated ICS / OT

Oct 14, 2025
Low 3.5

CVE-2025-40773

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications contains a…

Siemens SiPass integrated ICS / OT

Oct 14, 2025

Revision history

2026-02-10 #2
Added fix version V2.95 IR23 for CVE-2023-35002
2025-10-14 #1
Publication Date

References

SSA-599451: Multiple Vulnerabilities in SiPass integrated - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-599451.html