PT-2022-6314 · Unknown · Sicam Toolbox Ii

Published 2022-02-08 · Updated 2022-02-16 · CVE-2021-45106

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SICAM TOOLBOX II versions prior to the fixed version

Description A vulnerability has been identified in SICAM TOOLBOX II, related to insufficient protection of the data transmission control protocol. This could allow an attacker to access the database using the 1522 TCP port. The issue is associated with a circumventable access control within a database service.

Recommendations For SICAM TOOLBOX II versions prior to the fixed version, update to the latest version to resolve the issue. As a temporary workaround, consider restricting access to the database service to minimize the risk of exploitation. Avoid using the vulnerable access control within the database service until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2023-00827

CVE-2021-45106

Affected Products

Sicam Toolbox Ii

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2021-45106#match-7482087 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-45106 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-669737.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00827 · Security Note
• https://support.industry.siemens.com/cs/document/109811251/sicam-toolbox-ii-v07-01-hf01-package?dti=0&lc=en-WW · Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-041-05 · Note
• https://support.industry.siemens.com/cs/document/109811251/sicam-toolbox-ii-v07-01-hf01-package?dti=0&lc=en-WW · Note
• https://vuldb.com/ru/?id.192625 · Note
• https://t.me/cvenotify/26519 · Telegram Post
• https://t.me/true_secator/2618 · Telegram Post