Remote Message Broker Access Vulnerability in Siemens Products

CVE-2021-44522

Summary

A significant vulnerability has been identified in various versions of Siemens' SiPass integrated and Siveillance Identity products. The affected applications fail to adequately restrict access to their internal message broker system, exposing them to potential exploitation. This flaw may enable an unauthenticated remote attacker to subscribe to arbitrary message queues, leading to unauthorized access to sensitive information. Organizations using these products should promptly assess their systems and apply available mitigations to safeguard against potential risks.

References