VULNERABILITY INTELLIGENCE

CVE-2017-9942

CVSS score7.8 HIGH

EPSS probability0.27%

CISA KEVNot currently listed

Published2017-08-08

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems.

Weakness classification

CWE-257: Storing Passwords in a Recoverable Format

Primary references

productcert@siemens.com — Third Party Advisory, VDB Entry
productcert@siemens.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory