CVE-2016-5848

Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database privileges.

Score

CVSS 3.1 6.7 Medium

Status

Modified - cve@mitre.org

Published

2016-07-04

Last modified

2024-08-06

Weaknesses

CWE-200, CWE-255

Affected products

• Sicam Pas/pqs (Siemens)

References

• http://www.securityfocus.com/bid/91525
• http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf
• https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02