Broken Access Control in SiPass Integrated by Siemens

CVE-2025-40773

What is CVE-2025-40773?

A broken access control vulnerability exists in SiPass integrated versions prior to 3.0. This flaw allows attackers to bypass authorization mechanisms due to insufficient server-side checks. Exploitation of this vulnerability could lead to unauthorized access, enabling attackers to execute specific API requests and manipulate data belonging to other users. It's crucial for users of SiPass integrated to reinforce their security measures to mitigate potential risks.

References