The vulnerability of the software in Siemens SICAM PAS systems for telecontrol and telemanagement in the electric energy sector lies in the insufficient protection of passwords in the databases, which allows attackers to calculate the passwords.

The vulnerability of the software in Siemens SICAM PAS systems for telecontrol and telemanagement is related to insufficient protection of passwords in the databases. Exploiting this vulnerability allows a malicious actor, operating locally, to calculate the passwords using certain privileges...