description: A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service users") with administrative privileges that could enable a remote authenticated attacker to perform actions that are not visible to other users of the system, such as granting persons access to a secured area.
problem types: CWE-778: Insufficient Logging
affected:
{
product: SIPORT MP
vendor: Siemens AG
versions:
status: affected, version: All versions < 3.1.4
}