| Assigner | siemens |
| Reserved | 2023-07-21 |
| Published | 2023-10-10 |
| Updated | 2024-06-11 |
Description
A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.22). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the application process.
| CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C |
Problem types
CWE-732: Incorrect Permission Assignment for Critical Resource
Product status
V8.00 before V8.22
References
https://cert-portal.siemens.com/productcert/pdf/ssa-035466.pdf
https://cert-portal.siemens.com/productcert/html/ssa-035466.html
