SICAM GridPass vulnerabilities

3 known vulnerabilities in SICAM GridPass from Siemens. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  RFC: Improper Validation of Integrity Check Value

  CVE-2024-3596Jul 9, 2024IETFEPSS 14.9%

  RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authent

• 7.5 High severity

  OpenSSL: Buffer Copy without Checking Size of Input

  CVE-2022-3786Nov 1, 2022OpenSSLEPSS 92.5%

  A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an applic

• 7.5 High severity

  OpenSSL: Out-of-bounds Write

  CVE-2022-3602Nov 1, 2022OpenSSLEPSS 90.8%

  A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the app