CVE-2016-9157
CriticalSummary
A vulnerability in Siemens SICAM PAS (all versions before V8.09) could allow a remote attacker to cause a Denial of Service condition and potentially lead to unauthenticated remote code execution by sending specially crafted packets to port 19234/TCP.
Risk Assessment
The organization may be exposed to attacks that could lead to service outages and potential system takeover.
Recommendation
It is recommended to update Siemens SICAM PAS to version V8.09 or later to mitigate this vulnerability.
Other vulnerabilities in Siemens SICAM PAS
See all- CVE-2016-8566High
An issue was discovered in Siemens SICAM PAS before version 8.00 related to storing passwords in a recoverable format. An authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database.
- CVE-2016-9156High
A vulnerability in Siemens SICAM PAS (all versions before V8.09) allows a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP.
- CVE-2016-8567Critical
An issue was discovered in Siemens SICAM PAS before version 8.00 related to a factory account with hard-coded passwords. Attackers might gain privileged access to the database over Port 2638/TCP.
Original NVD description (English source)
A vulnerability in Siemens SICAM PAS (all versions before V8.09) could allow a remote attacker to cause a Denial of Service condition and potentially lead to unauthenticated remote code execution by sending specially crafted packets to port 19234/TCP.