PT-2016-5387 · Siemens · Siemens Apogee Insight

Publicado 2016-03-18 · Atualizado 2016-12-03 · CVE-2016-3155

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Siemens APOGEE Insight (affected versions not specified)

Description The issue concerns weak permissions for the application folder in Siemens APOGEE Insight, allowing local users to access sensitive information or modify data through unspecified means.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-3155

Produtos afetados

Siemens Apogee Insight

Referências · 3

• https://ics-cert.us-cert.gov/advisories/ICSA-16-082-01 · Nota
• http://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-151221.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-3155 · Nota de Segurança