CVE-2017-9940

EUVD-2017-18850
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.1 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 39%
Affected Products (NVD)
VendorProductVersion
siemenssipass_integrated
𝑥
≤ 2.65
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/99578
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf
http://www.securityfocus.com/bid/99578
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf