VDB

CVE-2022-31812

CVE-2022-31812 PUBLISHED CVSS 7.5 HIGH

A vulnerability has been identified in SiPass integrated (All versions < V2.95.3.18). Affected server applications contain an out of bounds read past the end of an allocated buffer while checking the integrity of incoming packets. This could allow an unauthenticated remote attacker to create a denial of service condition.

EPSS 0.40% · 60.9th percentile

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.40%
60.9th percentile

Affected Products

VendorProductVersions
SiemensSiPass integrated0
siemenssipass_integrated0

Timeline

  • May 23, 2025 CVE Published
  • May 23, 2025 CVE Updated
  • May 23, 2025 PoC Published
  • May 24, 2025 EPSS Score
  • May 29, 2025 PoC Published
  • Jun 4, 2025 EPSS Score
  • Jun 15, 2025 EPSS Score
  • Jun 26, 2025 EPSS Score
  • Jul 7, 2025 EPSS Score
  • Jul 19, 2025 EPSS Score
  • Jul 30, 2025 EPSS Score
  • Aug 10, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›