Summary
SICAM PQ Analyzer uses an unquoted registry entry and is thus vulnerable to an unquoted search path vulnerability.
Siemens has released an update for the SICAM PQ Analyzer and recommends to update to the latest version.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18). A service is started by an unquoted re…
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-173318: Unquoted Search Path Vulnerability in SICAM PQ Analyzer - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-173318.txt
-
SSA-173318: Unquoted Search Path Vulnerability in SICAM PQ Analyzer - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-173318.pdf
-
ICS Advisory ICSA-22-013-06 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-013-06
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B