CVEvulnerability

CVE-2016-5848

6.7 MEDIUM Published 2016-07-04 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2016-07-04
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 1.7 LOW — AV:L/AC:L/Au:S/C:P/I:N/A:N
Weaknesses: CWE-200, CWE-255

Description

Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database privileges.

Affected configurations

• siemens sicam pas\/pqs (<= 8.07)

Weakness · not in database (1)

CWE-255

Weakness · CWE (1)

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References

http://www.securityfocus.com/bid/91525 Third Party Advisory, VDB Entry
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02 Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/91525 Third Party Advisory, VDB Entry
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02 Third Party Advisory, US Government Resource