Elevated Privilege Vulnerability in SICAM TOOLBOX II by Siemens

CVE-2023-38641

What is CVE-2023-38641?

A security vulnerability has been identified in SICAM TOOLBOX II, where the application’s database service runs with elevated system privileges. This flaw could enable a local attacker to execute arbitrary operating system commands with the same privileges as the system user, potentially compromising the integrity and security of the affected system. It is crucial for users of versions prior to V07.10 to take immediate action to mitigate the risks associated with this vulnerability.

References