Skip to main content

Sipass Integrated CVE-2017-9942

HIGH
Storing Passwords in a Recoverable Format (CWE-257)
2017-08-08 productcert@siemens.com
Siemens Information Disclosure Sipass Integrated
7.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Aug 08, 2017 - 00:29 cve.org
HIGH 7.8

DescriptionCVE.org

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems.

AnalysisAI

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-257. A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems. Affected products include: Siemens Sipass Integrated.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Sipass Integrated

View all
CVE-2012-5409 CRITICAL POC
10.0 Nov 01

AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages r
CVE-2022-22965 CRITICAL POC
9.8 Apr 01

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
CVE-2017-9939 CRITICAL
9.8 Aug 08

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker wit
CVE-2021-44524 CRITICAL
9.8 Dec 14

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), S
CVE-2021-44523 CRITICAL
9.1 Dec 14

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), S
CVE-2022-31812 HIGH
8.7 May 23

A vulnerability has been identified in SiPass integrated (All versions < V2.95.3.18). Rated high severity (CVSS 8.7), th
CVE-2017-9940 HIGH
8.1 Aug 08

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker wit
CVE-2021-44522 HIGH
7.5 Dec 14

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), S
CVE-2017-9941 HIGH
7.4 Aug 08

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker in

Same weakness CWE-257 – Storing Passwords in a Recoverable Format

View all
CVE-2026-20128 HIGH POC
7.5
CVE-2021-35050 HIGH POC
7.5
CVE-2025-57789 MEDIUM POC
5.3
CVE-2019-1010241 MEDIUM POC
6.5
CVE-2025-8095 CRITICAL
9.1
CVE-2025-8904 CRITICAL
9.0
CVE-2016-15058 HIGH
8.6
CVE-2025-6996 HIGH
8.4

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2017-9942 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy