Description
A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications improperly check the size of data packets received for the configuration client login, causing a stack-based buffer overflow.
This could allow an unauthenticated remote attacker to crash the server application, creating a denial of service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SiPass integrated | All versions < V2.90.3.8 | — |
Advisories 2
- ICSA-23-194-02 Siemens SiPass Integrated CISA ICS & IT advisories · May 6, 2025
- SSA-924149 SSA-924149: Stack Overflow Vulnerability in SiPass Integrated before V2.90.3.8 Siemens ProductCERT · Jul 11, 2023