SIEMENS-SSA-992434 · Published 2025-02-17 · View on Siemens ProductCERT ↗

SSA-992434 V1.0: Directory Traversal Vulnerability in Third-Party Component in SiPass integrated

CVSS N/A MEDIUM

Risk Summary

<p>SiPass integrated is affected by a directory traversal vulnerability in the third-party component DotNetZip. The vulnerability could allow an attacker to execute arbitrary code on the application server, if a specially crafted backup set is used for a restore.</p> <p>Siemens has released a new version for SiPass integrated and recommends to update to the latest version.</p>

Remediations

Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Siemens

Affected Products (1)

Siemens · SSA-992434 V1.0: Directory Traversal Vulnerability in Third-Party Component in SiPass integrated See advisory

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more