VAR-201708-1517
Vulnerability from variot - Updated: 2023-12-18 12:03A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network. Siemens SiPass integrated Contains an access control vulnerability.Information may be obtained and information may be altered. The SiPass server is a component of the SiPass centralized access control system that receives the client's connection for communication. There is a file read/write vulnerability in Siemens SiPass integrated. An authentication-bypass vulnerability 2. A privilege-escalation vulnerability 3. A man-in-the-middle security bypass vulnerability 4. An information-disclosure vulnerability An attacker may leverage these issues to disclose sensitive information, perform certain unauthorized actions by conducting a man-in-the-middle attack, gain unauthorized access or elevated privileges. Versions prior to SiPass integrated 2.70 are vulnerable
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201708-1517",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sipass integrated",
"scope": "lte",
"trust": 1.0,
"vendor": "siemens",
"version": "2.65"
},
{
"model": "sipass integrated",
"scope": "eq",
"trust": 0.8,
"vendor": "siemens",
"version": "2.70"
},
{
"model": "sipass integrated",
"scope": "lt",
"trust": 0.6,
"vendor": "siemens",
"version": "2.70"
},
{
"model": "sipass integrated",
"scope": "eq",
"trust": 0.6,
"vendor": "siemens",
"version": "2.65"
},
{
"model": "sipass integrated mp2.6",
"scope": null,
"trust": 0.3,
"vendor": "siemens",
"version": null
},
{
"model": "sipass integrated mp2.5",
"scope": null,
"trust": 0.3,
"vendor": "siemens",
"version": null
},
{
"model": "sipass integrated mp2.4",
"scope": null,
"trust": 0.3,
"vendor": "siemens",
"version": null
},
{
"model": "sipass integrated",
"scope": "ne",
"trust": 0.3,
"vendor": "siemens",
"version": "2.70"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sipass integrated",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "6ba0449d-be86-414d-9d46-b1977cf1c756"
},
{
"db": "CNVD",
"id": "CNVD-2017-14603"
},
{
"db": "BID",
"id": "99578"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006972"
},
{
"db": "NVD",
"id": "CVE-2017-9940"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-606"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:siemens:sipass_integrated:*:sp2:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.65",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2017-9940"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Siemens",
"sources": [
{
"db": "BID",
"id": "99578"
}
],
"trust": 0.3
},
"cve": "CVE-2017-9940",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.0,
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "Single",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.5,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2017-9940",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 9.4,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2017-14603",
"impactScore": 9.2,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 9.4,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "6ba0449d-be86-414d-9d46-b1977cf1c756",
"impactScore": 9.2,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:N",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.0,
"id": "VHN-118143",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:S/C:P/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"impactScore": 5.2,
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 8.1,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2017-9940",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "Low",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2017-9940",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CNVD",
"id": "CNVD-2017-14603",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201707-606",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "IVD",
"id": "6ba0449d-be86-414d-9d46-b1977cf1c756",
"trust": 0.2,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-118143",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "6ba0449d-be86-414d-9d46-b1977cf1c756"
},
{
"db": "CNVD",
"id": "CNVD-2017-14603"
},
{
"db": "VULHUB",
"id": "VHN-118143"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006972"
},
{
"db": "NVD",
"id": "CVE-2017-9940"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-606"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network. Siemens SiPass integrated Contains an access control vulnerability.Information may be obtained and information may be altered. The SiPass server is a component of the SiPass centralized access control system that receives the client\u0027s connection for communication. There is a file read/write vulnerability in Siemens SiPass integrated. An authentication-bypass vulnerability\n2. A privilege-escalation vulnerability\n3. A man-in-the-middle security bypass vulnerability\n4. An information-disclosure vulnerability\nAn attacker may leverage these issues to disclose sensitive information, perform certain unauthorized actions by conducting a man-in-the-middle attack, gain unauthorized access or elevated privileges. \nVersions prior to SiPass integrated 2.70 are vulnerable",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-9940"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006972"
},
{
"db": "CNVD",
"id": "CNVD-2017-14603"
},
{
"db": "BID",
"id": "99578"
},
{
"db": "IVD",
"id": "6ba0449d-be86-414d-9d46-b1977cf1c756"
},
{
"db": "VULHUB",
"id": "VHN-118143"
}
],
"trust": 2.7
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-9940",
"trust": 3.6
},
{
"db": "SIEMENS",
"id": "SSA-339433",
"trust": 2.6
},
{
"db": "BID",
"id": "99578",
"trust": 2.0
},
{
"db": "CNNVD",
"id": "CNNVD-201707-606",
"trust": 0.9
},
{
"db": "CNVD",
"id": "CNVD-2017-14603",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006972",
"trust": 0.8
},
{
"db": "ICS CERT",
"id": "ICSA-17-194-01",
"trust": 0.3
},
{
"db": "IVD",
"id": "6BA0449D-BE86-414D-9D46-B1977CF1C756",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-118143",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "6ba0449d-be86-414d-9d46-b1977cf1c756"
},
{
"db": "CNVD",
"id": "CNVD-2017-14603"
},
{
"db": "VULHUB",
"id": "VHN-118143"
},
{
"db": "BID",
"id": "99578"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006972"
},
{
"db": "NVD",
"id": "CVE-2017-9940"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-606"
}
]
},
"id": "VAR-201708-1517",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "6ba0449d-be86-414d-9d46-b1977cf1c756"
},
{
"db": "CNVD",
"id": "CNVD-2017-14603"
},
{
"db": "VULHUB",
"id": "VHN-118143"
}
],
"trust": 1.48787876
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "6ba0449d-be86-414d-9d46-b1977cf1c756"
},
{
"db": "CNVD",
"id": "CNVD-2017-14603"
}
]
},
"last_update_date": "2023-12-18T12:03:28.382000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "SSA-339433",
"trust": 0.8,
"url": "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf"
},
{
"title": "Siemens SiPass integrated file read and write vulnerability patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/98176"
},
{
"title": "Siemens SiPass integrated Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=71720"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-14603"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006972"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-606"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-269",
"trust": 1.1
},
{
"problemtype": "CWE-284",
"trust": 0.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-118143"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006972"
},
{
"db": "NVD",
"id": "CVE-2017-9940"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.6,
"url": "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/99578"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-9940"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-9940"
},
{
"trust": 0.3,
"url": "http://subscriber.communications.siemens.com/"
},
{
"trust": 0.3,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-17-194-01"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-14603"
},
{
"db": "VULHUB",
"id": "VHN-118143"
},
{
"db": "BID",
"id": "99578"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006972"
},
{
"db": "NVD",
"id": "CVE-2017-9940"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-606"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "6ba0449d-be86-414d-9d46-b1977cf1c756"
},
{
"db": "CNVD",
"id": "CNVD-2017-14603"
},
{
"db": "VULHUB",
"id": "VHN-118143"
},
{
"db": "BID",
"id": "99578"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006972"
},
{
"db": "NVD",
"id": "CVE-2017-9940"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-606"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-07-15T00:00:00",
"db": "IVD",
"id": "6ba0449d-be86-414d-9d46-b1977cf1c756"
},
{
"date": "2017-07-15T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-14603"
},
{
"date": "2017-08-08T00:00:00",
"db": "VULHUB",
"id": "VHN-118143"
},
{
"date": "2017-07-13T00:00:00",
"db": "BID",
"id": "99578"
},
{
"date": "2017-09-07T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-006972"
},
{
"date": "2017-08-08T00:29:00.417000",
"db": "NVD",
"id": "CVE-2017-9940"
},
{
"date": "2017-07-14T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201707-606"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-07-15T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-14603"
},
{
"date": "2019-10-09T00:00:00",
"db": "VULHUB",
"id": "VHN-118143"
},
{
"date": "2017-07-13T00:00:00",
"db": "BID",
"id": "99578"
},
{
"date": "2017-09-07T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-006972"
},
{
"date": "2019-10-09T23:30:53.470000",
"db": "NVD",
"id": "CVE-2017-9940"
},
{
"date": "2019-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201707-606"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201707-606"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Siemens SiPass integrated Access control vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-006972"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "lack of information",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201707-606"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…