CVE-2021-44522

Published: Dec 14, 2021Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), Siveillance Identity V1.6 (All versions < V1.6.284.0). Affected applications insufficiently limit the access to the internal message broker system. This could allow an unauthenticated remote attacker to subscribe to arbitrary message queues.

Affected (6)

Products: Siemens: Sipass Integrated, Siveillance Identity

Siemens

2 products

Sipass Integrated

Siveillance Identity

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Siemens Sipass Integrated	Version 2.76
Siemens Sipass Integrated	Version 2.76 sp1
Siemens Sipass Integrated	Version 2.80
Siemens Sipass Integrated	Version 2.85
Siemens Siveillance Identity	From 1.6 to 1.6.280.0
Siemens Siveillance Identity	Version 1.5