CVE-2021-44524
published 2021-12-14CVE-2021-44524: A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions)…
PriorityP266critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.58%
72.6th percentile
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), Siveillance Identity V1.6 (All versions < V1.6.284.0). Affected applications insufficiently limit the access to the internal user authentication service. This could allow an unauthenticated remote attacker to trigger several actions on behalf of valid user accounts.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | sipass_integrated | — | — |
| siemens | sipass_integrated | — | — |
| siemens | sipass_integrated | — | — |
| siemens | sipass_integrated_v2.76 | — | — |
| siemens | sipass_integrated_v2.80 | — | — |
| siemens | sipass_integrated_v2.85 | — | — |
| siemens | siveillance_identity | — | — |
| siemens | siveillance_identity | 1.6 – 1.6.284.0 | — |
| siemens | siveillance_identity_v1.5 | — | — |
| siemens | siveillance_identity_v1.6 | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Detect unauthenticated remote access attempts to the internal user authentication service of SiPass Integrated or Siveillance Identity — network traffic from unauthenticated sources reaching internal authentication service endpoints should be flagged. ↗
- →Monitor for unauthenticated remote access to the internal message broker system (CVE-2021-44522, co-present with CVE-2021-44524 in same affected products); detect subscription attempts to arbitrary message queues from unauthenticated sources. ↗
- →Monitor for unauthenticated remote access to the internal activity feed database (CVE-2021-44523, co-present with CVE-2021-44524); detect read/modify/delete operations on activity feed entries from unauthenticated sources. ↗
- ·No known public exploits exist for this vulnerability as of the advisory date; detections are based on behavioral/network access patterns rather than known exploit signatures. ↗
- ·CVSS v3 score is 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) — network-exploitable with no authentication, no user interaction, and high integrity impact. Prioritize detection on network perimeter and internal segmentation points. ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7m98-whf4-6699: A vulnerability has been identified in SiPass integrated V2
ghsa_unreviewed·2021-12-15
CVE-2021-44524 [CRITICAL] CWE-287 GHSA-7m98-whf4-6699: A vulnerability has been identified in SiPass integrated V2
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), Siveillance Identity V1.6 (All versions < V1.6.284.0). Affected applications insufficiently limit the access to the internal user authentication service. This could allow an unauthenticated remote attacker to trigger several actions on behalf of valid user accounts.
CISA ICS
Siemens SiPass Integrated
cisa_ics·2021-12-16·CVSS 7.5
[HIGH] Siemens SiPass Integrated
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens SiPass Integrated
Last RevisedDecember 16, 2021
Alert CodeICSA-21-350-19
## 1. EXECUTIVE SUMMARY
- CVSS v3 7.5
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SiPass Integrated
- Vulnerabilities: Exposure of Resource to Wrong Sphere
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an unauthenticated remote attacker to access or modify several internal application resources.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
The following versions of Siemens SiPass integrated, an access contro
CISA ICS
Siemens Siveillance Identity
cisa_ics·2021-12-16·CVSS 7.5
[HIGH] Siemens Siveillance Identity
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens Siveillance Identity
Last RevisedDecember 16, 2021
Alert CodeICSA-21-350-14
## 1. EXECUTIVE SUMMARY
- CVSS v3 7.5
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: Siveillance Identity
- Vulnerabilities: Exposure of Resource to Wrong Sphere
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an unauthenticated remote attacker to access or modify several internal application resources.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
The following versions of Siveillance Identity, a web-based sel
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-12-14
Published