Critical severity9.8NVD Advisory· Published Dec 14, 2021· Updated Jun 17, 2026
CVE-2021-44524
CVE-2021-44524
Description
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), Siveillance Identity V1.6 (All versions < V1.6.284.0). Affected applications insufficiently limit the access to the internal user authentication service. This could allow an unauthenticated remote attacker to trigger several actions on behalf of valid user accounts.
Affected products
13cpe:2.3:a:siemens:sipass_integrated:2.76:-:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:siemens:sipass_integrated:2.76:-:*:*:*:*:*:*
- cpe:2.3:a:siemens:sipass_integrated:2.76:sp1:*:*:*:*:*:*
- cpe:2.3:a:siemens:sipass_integrated:2.80:*:*:*:*:*:*:*
- cpe:2.3:a:siemens:sipass_integrated:2.85:*:*:*:*:*:*:*
- (no CPE)range: V2.76, V2.80, V2.85
- (no CPE)range: All versions
- (no CPE)range: All versions
- (no CPE)range: All versions
cpe:2.3:a:siemens:siveillance_identity:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:siemens:siveillance_identity:*:*:*:*:*:*:*:*range: >=1.6,<=1.6.284.0
- cpe:2.3:a:siemens:siveillance_identity:1.5:*:*:*:*:*:*:*
- (no CPE)range: < V1.6.284.0
- (no CPE)range: All versions
- (no CPE)range: All versions < V1.6.284.0
Patches
Vulnerability mechanics
References
2- cert-portal.siemens.com/productcert/pdf/ssa-160202.pdfnvdVendor Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-463116.pdfnvdVendor Advisory
News mentions
0No linked articles in our index yet.