PT-2025-22801 · Unknown · Sipass Integrated
CVE-2022-31812
·
Published
2025-05-23
·
Updated
2025-05-24
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
SiPass integrated versions prior to 2.95.3.18
Description
A vulnerability has been identified that could allow an unauthenticated remote attacker to create a denial of service condition. The issue is caused by an out of bounds read past the end of an allocated buffer while checking the integrity of incoming packets.
Recommendations
For versions prior to 2.95.3.18, update to version 2.95.3.18 or later to resolve the issue. As a temporary workaround, consider restricting access to the server application to minimize the risk of exploitation.
Fix
DoS
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sipass Integrated