Password Storage Issue in Siemens SICAM PAS Software
CVE-2016-8566

7.8HIGH

Key Information:

Vendor

Siemens
Status
Siemens Sicam Pas Before 8.00
Vendor
CVE Published:
13 February 2017

What is CVE-2016-8566?

A vulnerability identified in Siemens SICAM PAS prior to version 8.00 allows an authenticated local attacker with specific privileges to reconstruct user passwords stored in a recoverable format. This flaw poses a significant risk as it could enable unauthorized access to the database and compromise sensitive user information, emphasizing the importance of secure password management practices.

Affected Version(s)

Siemens SICAM PAS before 8.00 Siemens SICAM PAS before 8.00

References

http://www.securityfocus.com/bid/94552
vdb-entryx_refsource_BID
https://ics-cert.us-cert.gov/advisories/ICSA-16-336-01
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.