Description
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). The affected application's database service is executed as `NT AUTHORITY\SYSTEM`.
This could allow a local attacker to execute operating system commands with elevated privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SICAM TOOLBOX II | All versions < V07.10 | — |
Advisories 2
- ICSA-23-222-10 Siemens SICAM TOOLBOX II CISA ICS & IT advisories · May 6, 2025
- SSA-975961 SSA-975961: Privilege Escalation Vulnerabilities in SICAM TOOLBOX II before V07.10 Siemens ProductCERT · Aug 8, 2023