PT-2023-29458 · Siemens · Sicam Pas/Pqs

Published 2023-10-10 · Updated 2024-06-11 · CVE-2023-45205

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SICAM PAS/PQS versions 8.00 through 8.20

Description A security issue has been identified where the application is installed with specific files and folders that have insecure permissions. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges to NT AUTHORITY/SYSTEM.

Recommendations For SICAM PAS/PQS versions 8.00 through 8.20, update the permissions of the installed files and folders to prevent arbitrary code injection and privilege escalation.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2023-45205

Affected Products

Sicam Pas/Pqs

References · 4

• https://cert-portal.siemens.com/productcert/pdf/ssa-035466.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-45205 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45205 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-035466.html · Note