Description (CNA)
A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service users") with administrative privileges that could enable a remote authenticated attacker to perform actions that are not visible to other users of the system, such as granting persons access to a secured area.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens AG / SIPORT MP | affected All versions < 3.1.4 |
CWE
CWE-778
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-978558.pdf
- https://www.us-cert.gov/ics/advisories/icsa-20-042-08
ADP enrichment
No English description supplied.