CVE-2016-8566

7.8HIGH

Key Information:

Vendor
Siemens
Status
Siemens Sicam Pas Before 8.00
Vendor
CVE Published:
13 February 2017

Summary

An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database.

Affected Version(s)

Siemens SICAM PAS before 8.00 Siemens SICAM PAS before 8.00

References

http://www.securityfocus.com/bid/94552
vdb-entryx_refsource_BID
https://ics-cert.us-cert.gov/advisories/ICSA-16-336-01
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.