Insufficient Access Control in SiPass Integrated and Siveillance Identity by Siemens

CVE-2021-44524

What is CVE-2021-44524?

A significant exposure has been reported in Siemens' security applications SiPass Integrated and Siveillance Identity, where inadequate restrictions on internal user authentication services can be exploited by unauthenticated remote attackers. This flaw permits attackers to execute actions as if they were valid users, potentially compromising sensitive information and system integrity. The identified versions are vulnerable, prompting a need for immediate review and remediation to secure affected systems.

References