Buffer Overflow Vulnerability in SiPass Integrated Server Application by Siemens

CVE-2022-31810

What is CVE-2022-31810?

A security flaw in the SiPass Integrated server application allows for a stack-based buffer overflow due to improper size checks of data packets during the configuration client login. This vulnerability permits an unauthenticated remote attacker to exploit the flaw, potentially crashing the server application and resulting in a denial of service condition. Users of all versions prior to V2.90.3.8 should assess their systems for potential risk.

References