Description
A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.20). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges to `NT AUTHORITY/SYSTEM`.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SICAM PAS/PQS | V8.00 – < V8.20 | V8.20 |
Advisories 3
- ICSA-23-285-06 Siemens SICAM PAS/PQS CISA ICS & IT advisories · Jun 11, 2024
- SSA-035466 SSA-035466: Incorrect Permission Assignment in SICAM PAS/PQS Siemens ProductCERT · Jun 11, 2024
- WID-SEC-2023-2603 Siemens SICAM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 9, 2023