CVE-2022-31812: Siemens Sipass Integrated

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability has been identified in SiPass integrated (All versions < V2.95.3.18). Affected server applications contain an out of bounds read past the end of an allocated buffer while checking the integrity of incoming packets. This could allow an unauthenticated remote attacker to create a denial of service condition.

Affected products

• Siemens Sipass Integrated: before 2.95.3.18 (fixed in 2.95.3.18)

Published 2025-05-23. Last modified 2026-06-17.