Riskcovery

CVE-2021-44522

State
Published
Severity
Not scored
Published
Dec 14, 2021
Updated
Aug 4, 2024
Reserved
Dec 2, 2021

Read the record on cve.org

Description

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), Siveillance Identity V1.6 (All versions < V1.6.284.0). Affected applications insufficiently limit the access to the internal message broker system. This could allow an unauthenticated remote attacker to subscribe to arbitrary message queues.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-668 Exposure of Resource to Wrong Sphere

Affected Products

ProductVersions
SiPass integrated V2.76Siemens
  • All versionsAffected
SiPass integrated V2.80Siemens
  • All versionsAffected
SiPass integrated V2.85Siemens
  • All versionsAffected
Siveillance Identity V1.5Siemens
  • All versionsAffected
Siveillance Identity V1.6Siemens
  • All versions < V1.6.284.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.