Summary
SiPass integrated is affected by a directory traversal vulnerability in the third-party component DotNetZip. The vulnerability could allow an attacker to execute arbitrary code on the application server, if a specially crafted backup set is used for a restore.
Siemens has released a new version for SiPass integrated and recommends to update to the latest version.
Vulnerabilities 1
-
Critical 9.1CVE-2024-48510 Public exploit
DotNetZip Directory Traversal vulnerability
Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maint…
Revision history
-
#1
Publication Date
References
-
SSA-992434: Directory Traversal Vulnerability in Third-Party Component in SiPass integrated - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-992434.html