A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.20). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges to `NT AUTHORITY/SYSTEM`.
References
Configurations
History
21 Nov 2024, 08:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert-portal.siemens.com/productcert/html/ssa-035466.html - | |
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-035466.pdf - Patch, Vendor Advisory |
11 Jun 2024, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 Oct 2023, 02:24
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Siemens
Siemens sicam Pas\/pqs |
|
| CPE | cpe:2.3:a:siemens:sicam_pas\/pqs:*:*:*:*:*:*:*:* | |
| References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-035466.pdf - Patch, Vendor Advisory |
10 Oct 2023, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-10 11:15
Updated : 2024-11-21 08:26
NVD link : CVE-2023-45205
Mitre link : CVE-2023-45205
CVE.ORG link : CVE-2023-45205
JSON object : View
Products Affected
siemens
- sicam_pas\/pqs
CWE
CWE-732
Incorrect Permission Assignment for Critical Resource