1. Home
  2. CVE Database
  3. CVE-2025-40774
MEDIUM · 4.4

CVE-2025-40774

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users wit...

Vulnerability Description

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this vulnerability allows an attacker to obtain and use valid user passwords. This can lead to unauthorized access to user accounts, data breaches, and potential system compromise.

CVSS Score

4.4

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
SiemensSipass Integrated< 3.00

Related Weaknesses (CWE)

CWE-257

References

FAQ

What is CVE-2025-40774?

CVE-2025-40774 is a vulnerability with a CVSS score of 4.4 (MEDIUM). A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users wit...

How severe is CVE-2025-40774?

CVE-2025-40774 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-40774?

Check the references section above for vendor advisories and patch information. Affected products include: Siemens Sipass Integrated.