CVE-2021-44522: siemens sipass_integrated Exposure of Resource to Wrong Sphere
Vulnerability summary
CVE-2021-44522 is a high (CVSS 7.5) Exposure of Resource to Wrong Sphere vulnerability in siemens sipass_integrated. EPSS estimates a 1.41% chance of exploitation in the next 30 days, higher than 72.1% of scored vulnerabilities.
Timeline
- 14-12-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), Siveillance Identity V1.6 (All versions < V1.6.284.0). Affected applications insufficiently limit the access to the internal message broker system. This could allow an unauthenticated remote attacker to subscribe to arbitrary message queues.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.41%
Chance of exploitation in the next 30 days
Percentile
72%
Versus all other CVEs
30-day change
+0.05 pp
From 1.36% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Siemens7 products
- sipass_integrated2.76 | 2.76:sp1 | 2.80 | 2.85
- sipass integrated v2.76All versions (No fix recorded)
- sipass integrated v2.80All versions (No fix recorded)
- sipass integrated v2.85All versions (No fix recorded)
- siveillance_identity≥ 1.6, ≤ 1.6.280.0 | 1.5
1 vendor · 7 products