CVE-2023-38640 | THREATINT

Description

A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.22). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the application process.

Reserved 2023-07-21 | Published 2023-10-10 | Updated 2024-08-02 | Assigner siemens

MEDIUM: 6.6CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C

Problem types

CWE-732: Incorrect Permission Assignment for Critical Resource

Product status

Default status

unknown

V8.00 before V8.22

affected

References

cert-portal.siemens.com/productcert/pdf/ssa-035466.pdf

cert-portal.siemens.com/productcert/html/ssa-035466.html

cve.org (CVE-2023-38640)

nvd.nist.gov (CVE-2023-38640)

Download JSON