Library File Security Flaw in SICAM PAS/PQS by Siemens

CVE-2022-43722

Summary

A vulnerability exists in the SICAM PAS/PQS systems due to insufficient security measures on a folder containing critical library files. This flaw enables attackers to inject malicious DLL files into the folder, which can be executed with SYSTEM rights when a service requiring the DLL is initiated. Consequently, there is a significant risk of unauthorized actions being performed on the system, potentially leading to severe consequences. Users are urged to update to the latest firmware version to mitigate this risk.

References