Siemens SICAM PAS/PQS
SICAM PAS/PQS is affected by insecure permission assignments in application folders that could allow an authenticated local attacker to read and modify configuration data or to escalate privileges. Siemens has released a new version for SICAM PAS/PQS and recommends to update to the latest version. Siemens has also released a security patch that can be applied to previous versions to fix the permissions of the impacted folders. See also chapter Additional Information.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-45205US | — | — | ||
A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.20). The affected application is installed with specific files and folders with insecure permission… | ||||
| CVE-2023-38640US | medium4.4 | — | ||
A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.22). The affected application is installed with specific files and folders with insecure permission… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-035466: Incorrect Permission Assignment in SICAM PAS/PQS - CSAF Versionself
- SSA-035466: Incorrect Permission Assignment in SICAM PAS/PQS - HTML Versionself
- SSA-035466: Incorrect Permission Assignment in SICAM PAS/PQS - PDF Versionself
- SSA-035466: Incorrect Permission Assignment in SICAM PAS/PQS - TXT Versionself
- ICS Advisory ICSA-23-285-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-285-06 - Web Versionself
- Recommended Practicesexternal
Behebungen (4)
- MitigationSICAM PAS/PQS
Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts on the server
- MitigationSICAM PAS/PQS
Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts on the server
- BehobenSICAM PAS/PQS
Install the Security Patch (available at https://support.industry.siemens.com/cs/ww/ en/view/109824392/), which can be applied to versions V8.00 to V8.21
- BehobenSICAM PAS/PQS
Install the Security Patch (available at https://support.industry.siemens.com/cs/ww/ en/view/109824392/), which can be applied to versions V8.00 to V8.21
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan