Description
A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.22). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the application process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SICAM PAS/PQS | V8.00 – < V8.22 | V8.22 |
Advisories 3
- ICSA-23-285-06 Siemens SICAM PAS/PQS CISA ICS & IT advisories · Jun 11, 2024
- SSA-035466 SSA-035466: Incorrect Permission Assignment in SICAM PAS/PQS Siemens ProductCERT · Jun 11, 2024
- WID-SEC-2023-2603 Siemens SICAM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 9, 2023