SSA-173318: Unquoted Search Path Vulnerability in SICAM PQ Analyzer
SICAM PQ Analyzer uses an unquoted registry entry and is thus vulnerable to an unquoted search path vulnerability. Siemens has released an update for the SICAM PQ Analyzer and recommends to update to the latest version.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-45460US | high8.1 | — | ||
A vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18). A service is started by an unquoted registry entry. As there are spaces in this path, attackers wit… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- MitigationSICAM PQ Analyzer
Make sure these executables do not exist, cannot be created or cannot be executed (e.g. by Group Policy Software Restriction): - C:\Program.* - C:\Program Files.* - C:\Program Files (x86)\Siemens.* - C:\Program Files (x86)\Siemens Energy\SICAM\PQ.* Please note that blocking of e.g. "C:\Program.exe" is not sufficient, as the attacker might be able to plant "C:\Program.com", "C:\Program.msi" or an executable with any other extension there.
- FixedSICAM PQ Analyzer
Update to V3.18 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804322
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan