CVE-2016-8567
CriticalSummary
An issue was discovered in Siemens SICAM PAS before version 8.00 related to a factory account with hard-coded passwords. Attackers might gain privileged access to the database over Port 2638/TCP.
Risk Assessment
The presence of a factory account with hard-coded passwords poses a serious security risk, allowing attackers to access sensitive information.
Recommendation
It is recommended to update the system to the latest version and to remove or disable the factory account with hard-coded passwords.
Other vulnerabilities in Siemens SICAM PAS
See all- CVE-2016-8566High
An issue was discovered in Siemens SICAM PAS before version 8.00 related to storing passwords in a recoverable format. An authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database.
- CVE-2016-9156High
A vulnerability in Siemens SICAM PAS (all versions before V8.09) allows a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP.
- CVE-2016-9157Critical
A vulnerability in Siemens SICAM PAS (all versions before V8.09) could allow a remote attacker to cause a Denial of Service condition and potentially lead to unauthenticated remote code execution by sending specially crafted packets to port 19234/TCP.
Original NVD description (English source)
An issue was discovered in Siemens SICAM PAS before 8.00. A factory account with hard-coded passwords is present in the SICAM PAS installations. Attackers might gain privileged access to the database over Port 2638/TCP.