Siemens SICAM PAS Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-8567US | critical9.8OT elevated | — | ||
An issue was discovered in Siemens SICAM PAS before 8.00. A factory account with hard-coded passwords is present in the SICAM PAS installations. Attackers might gain privileged acc… | ||||
| CVE-2016-8566US | high7.8 | — | ||
An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possib… | ||||
| CVE-2016-9157US | critical9.8 | — | ||
A vulnerability in Siemens SICAM PAS (all versions before V8.09) could allow a remote attacker to cause a Denial of Service condition and potentially lead to unauthenticated remote… | ||||
| CVE-2016-9156US | high7.3 | — | ||
A vulnerability in Siemens SICAM PAS (all versions before V8.09) could allow a remote attacker to upload, download, or delete files in certain parts of the file system by sending s… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-16-336-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-16-336-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationSICAM PAS
For more information on this vulnerability and more detailed mitigation instructions, please see Siemens Security Advisory SSA-946325 at the following location: (https://cert-portal.siemens.com/productcert/pdf/ssa-946325.pdf)
https://cert-portal.siemens.com/productcert/pdf/ssa-946325.pdf - MitigationSICAM PAS
For more information on this vulnerability and more detailed mitigation instructions, please see Siemens Security Advisory SSA-946325 at the following location: (https://cert-portal.siemens.com/productcert/pdf/ssa-946325.pdf)
https://cert-portal.siemens.com/productcert/pdf/ssa-946325.pdf - MitigationSICAM PAS
For more information on this vulnerability and more detailed mitigation instructions, please see Siemens Security Advisory SSA-946325 at the following location: (https://cert-portal.siemens.com/productcert/pdf/ssa-946325.pdf)
https://cert-portal.siemens.com/productcert/pdf/ssa-946325.pdf - MitigationSICAM PAS
For more information on this vulnerability and more detailed mitigation instructions, please see Siemens Security Advisory SSA-946325 at the following location: (https://cert-portal.siemens.com/productcert/pdf/ssa-946325.pdf)
https://cert-portal.siemens.com/productcert/pdf/ssa-946325.pdf
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan