NetSight
critical9.1

CVE-2021-44523

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), …

Impact

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), Siveillance Identity V1.6 (All versions < V1.6.284.0). Affected applications insufficiently limit the access to the internal activity feed database. This could allow an unauthenticated remote attacker to read, modify or delete activity feed entries.

Affected products

VendorProductAffected versions
SiemensSipass Integrated
Versions 2.76, 2.80, 2.85
SiemensSiveillance Identity
from 1.6 through 1.6.280.0
Version 1.5

Weakness classification

References