CVE-2022-31812

8.7 highEPSS 0.7%

High (8.7) in siemens sipass integrated. EPSS 0.7% chance of exploitation in the next 30 days.

A vulnerability has been identified in SiPass integrated (All versions < V2.95.3.18). Affected server applications contain an out of bounds read past the end of an allocated buffer while checking the integrity of incoming packets. This could allow an unauthenticated remote attacker to create a denial of service condition.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2025-05-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:sipass_integrated

References

https://cert-portal.siemens.com/productcert/html/ssa-041082.html

Check your stack JSON