PT-2025-22801 · Unknown · Sipass Integrated

Published 2025-05-23 · Updated 2025-05-24 · CVE-2022-31812

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions SiPass integrated versions prior to 2.95.3.18

Description A vulnerability has been identified that could allow an unauthenticated remote attacker to create a denial of service condition. The issue is caused by an out of bounds read past the end of an allocated buffer while checking the integrity of incoming packets.

Recommendations For versions prior to 2.95.3.18, update to version 2.95.3.18 or later to resolve the issue. As a temporary workaround, consider restricting access to the server application to minimize the risk of exploitation.

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-31812

Affected Products

Sipass Integrated

References · 5

• https://osv.dev/vulnerability/CVE-2022-31812 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-041082.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31812 · Security Note
• https://t.me/cvetracker/24538 · Telegram Post
• https://twitter.com/CVEnew/status/1926244431859950004 · Twitter Post