Vulnetix
Try Vulnetix Request Demo
CVE-2025-40773 PUBLISHED CVSS 3.5 LOW

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications contains a broken access control vulnerability. The authorization mechanism lacks sufficient server-side checks, allowing an attacker to execute a specific API request. Successful exploitation allows an attacker to potentially manipulate data belonging to other users.

EPSS 0.04% · 11.9th percentile

Risk Scores

CVSS v3.1
3.5
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS Score
0.04%
11.9th percentile

Affected Products

VendorProductVersions
siemenssipass_integrated0
SiemensSiPass integrated0

Timeline

References

Open in Interactive Console →