A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications contains a broken access control vulnerability. The authorization mechanism lacks sufficient server-side checks, allowing an attacker to execute a specific API request.
Successful exploitation allows an attacker to potentially manipulate data belonging to other users.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-599451.html | Vendor Advisory |
Configurations
History
23 Oct 2026, 21:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) Una vulnerabilidad ha sido identificada en SiPass integrated (Todas las versiones anteriores a V3.0). Las aplicaciones de servidor afectadas contienen una vulnerabilidad de control de acceso roto. El mecanismo de autorización carece de suficientes comprobaciones del lado del servidor, permitiendo a un atacante ejecutar una solicitud de API específica. La explotación exitosa permite a un atacante manipular potencialmente datos pertenecientes a otros usuarios. |
08 Oct 2026, 11:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
Information
Published : 2025-10-14 10:15
Updated : 2026-10-23 21:10
NVD link : CVE-2025-40773
Mitre link : CVE-2025-40773
CVE.ORG link : CVE-2025-40773
JSON object : View
Products Affected
siemens
- sipass_integrated
CWE
CWE-639
Authorization Bypass Through User-Controlled Key