CVE-2017-9940: A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user…

high8.1CVSS 3.0

AVNACLPRLUINSUCHIHAN

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
linux	linux_kernel	>= 0 < 3.13.0-123.172	3.13.0-123.172
siemens	sipass_integrated	<= 2.65	—

CVSS provenance

nvdv3.08.1HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

osv7.0HIGH