medium6.7
CVE-2016-5848
Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leverag…
Impact
Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Sicam Pas\/Pqs | through 8.07 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/91525
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02
- http://www.securityfocus.com/bid/91525
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02