PT-2016-2995 · Siemens · Sicam Pas

CVE-2016-9157

·

Publicado

2016-12-05

·

Atualizado

2023-10-17

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Siemens SICAM PAS versions prior to V8.09
Description The issue is related to inadequate access control in the SICAM PAS telecontrol system, which could allow a remote attacker to cause a Denial of Service condition and potentially lead to unauthenticated remote code execution. This can be achieved by sending specially crafted packets to port 19234/TCP.
Recommendations For versions prior to V8.09, update to version V8.09 or later to resolve the issue. As a temporary workaround, consider restricting access to port 19234/TCP to minimize the risk of exploitation.

Correção

Improper Access Control

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2017-00006
CVE-2016-9157

Produtos afetados

Sicam Pas