VulnerabilityModified
CVE-2016-5848
Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database privileges.
MEDIUM 6.7EPSS 0.31%
Does this matter?
Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.
Description
Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database privileges.
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.31% probability · 24th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200, CWE-255
- Affected
- siemens/sicam pas\/pqs
- Source
- cve@mitre.org
References
- http://www.securityfocus.com/bid/91525Third Party Advisory, VDB Entry
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdfVendor Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/91525Third Party Advisory, VDB Entry
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdfVendor Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02Third Party Advisory, US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.