PT-2016-5387 · Siemens · Siemens Apogee Insight

Published 2016-03-18 · Updated 2016-12-03 · CVE-2016-3155

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Siemens APOGEE Insight (affected versions not specified)

Description The issue concerns weak permissions for the application folder in Siemens APOGEE Insight, allowing local users to access sensitive information or modify data through unspecified means.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-3155

Affected Products

Siemens Apogee Insight

References · 3

• http://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-151221.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3155 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-082-01 · Note