CVE Catalog

CVE-2016-8567

Critical
Published: Translated: NVD NIST

Summary

An issue was discovered in Siemens SICAM PAS before version 8.00 related to a factory account with hard-coded passwords. Attackers might gain privileged access to the database over Port 2638/TCP.

Risk Assessment

The presence of a factory account with hard-coded passwords poses a serious security risk, allowing attackers to access sensitive information.

Recommendation

It is recommended to update the system to the latest version and to remove or disable the factory account with hard-coded passwords.

Original NVD description (English source)

An issue was discovered in Siemens SICAM PAS before 8.00. A factory account with hard-coded passwords is present in the SICAM PAS installations. Attackers might gain privileged access to the database over Port 2638/TCP.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS