CVE-2025-40774

Katalog CVE

CVSS 4.4 · Medium EPSS 0,14%

Kerentanan Storing Passwords in a Recoverable Format pada siemens sipass integrated. Skor CVSS 3.1 4.4 (Medium) menurut siemens.com.

Deskripsi (NVD)

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this vulnerability allows an attacker to obtain and use valid user passwords. This can lead to unauthorized access to user accounts, data breaches, and potential system compromise.

Rincian

Terbit di NVD

14 Oktober 2025

Terakhir diubah

8 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

4.4 (Medium), sumber siemens.com
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-257: Storing Passwords in a Recoverable Format

EPSS (30 hari)

0,14% peluang dieksploitasi; lebih tinggi dari 2,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cert-portal.siemens.com/productcert/html/ssa-599451.html advisory vendor