CVE-2016-3155

Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors...

Design/Logic Flaw

Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-3155

Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-3155

Summary: CVE-2016-3155 affects Siemens APOGEE Insight, where the application folder has weak default permissions. This could let an authenticated local user view or modify APOGEE Insight data via unspecified vectors. The vulnerability is not remote-exploitable; exploitation requires OS-level acce...

Siemens APOGEE Insight Database Conversion Tool DLL Hijacking Vulnerability

Insight is the monitoring and configuration software used in the Siemens building automation system APOGEE. A DLL hijacking vulnerability exists in the Siemens APOGEE Insight Database Conversion Tool. Because Insight's Database Conversion component, the Convert.exe program, does not securely load...