PT-2016-3178 · Siemens · Siemens Sicam Pas
CVSS v3.1
6.7
Média
| Vetor | AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Siemens SICAM PAS versions prior to 8.07
Description
The issue is related to insufficient password protection in the database of the Siemens SICAM PAS system, which can be exploited by a local attacker to calculate passwords using certain database privileges.
Recommendations
For Siemens SICAM PAS versions prior to 8.07, update to version 8.07 or later to resolve the issue. As a temporary workaround, consider restricting access to the database and limiting privileges to minimize the risk of exploitation.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Siemens Sicam Pas