Summary
SICAM TOOLBOX II contains two vulnerabilities that could allow local attackers to execute code on the system with elevated privileges.
Siemens has released an update for SICAM TOOLBOX II and recommends to update to the latest version.
Vulnerabilities 2
-
High 7.8
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). Affected applications do not properly …
-
High 7.8
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). The affected application's database se…
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-975961: Privilege Escalation Vulnerabilities in SICAM TOOLBOX II before V07.10 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-975961.html
-
SSA-975961: Privilege Escalation Vulnerabilities in SICAM TOOLBOX II before V07.10 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-975961.pdf
-
SSA-975961: Privilege Escalation Vulnerabilities in SICAM TOOLBOX II before V07.10 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-975961.txt
-
ICS Advisory ICSA-23-222-10 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-222-10
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B