CVE-2017-9940

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.1 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
siemensCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 40%
VendorProductVersion
siemenssipass_integrated
𝑥
≤ 2.65
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/99578
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf
http://www.securityfocus.com/bid/99578
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf