Siemens SiPass Integrated Out-of-Bounds Read Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in Siemens SiPass Integrated versions prior to V2.95.3.18. The issue arises from an out-of-bounds read past the end of an allocated buffer in the affected server applications. This vulnerability allows an unauthenticated remote attacker to create a denial-of-service condition by disrupting the normal functioning of the application.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the application to become unresponsive or unavailable.

Remediation

Users are advised to update SiPass Integrated to version V2.95.3.18 or later. For more information, visit the Siemens Industry Support page.