Password Exposure Vulnerability in SiPass Integrated by Siemens

CVE-2025-40774

What is CVE-2025-40774?

A vulnerability has been identified in SiPass Integrated prior to version 3.0 that permits the storage of user passwords in an encrypted format. However, due to the design flaw, decryption keys are accessible to users with administrative privileges. This scenario creates a risk where unauthorized individuals can potentially recover and exploit user passwords, leading to unauthorized access, data breaches, and a compromise of the system integrity.

References