Siemens SICAM PAS vulnerabilities
4 known CVE vulnerabilities in Siemens SICAM PAS, translated and rated.
- CVE-2016-8566High
An issue was discovered in Siemens SICAM PAS before version 8.00 related to storing passwords in a recoverable format. An authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database.
- CVE-2016-9156High
A vulnerability in Siemens SICAM PAS (all versions before V8.09) allows a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP.
- CVE-2016-8567Critical
An issue was discovered in Siemens SICAM PAS before version 8.00 related to a factory account with hard-coded passwords. Attackers might gain privileged access to the database over Port 2638/TCP.
- CVE-2016-9157Critical
A vulnerability in Siemens SICAM PAS (all versions before V8.09) could allow a remote attacker to cause a Denial of Service condition and potentially lead to unauthenticated remote code execution by sending specially crafted packets to port 19234/TCP.