CVE-2016-8566

An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database...

CVE-2016-8566: Undefined Security Weakness

An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database...

CVE-2016-8567: Use of Hard-coded Credentials

An issue was discovered in Siemens SICAM PAS before 8.00. A factory account with hard-coded passwords is present in the SICAM PAS installations. Attackers might gain privileged access to the database over Port 2638/TCP...

CVE-2016-7987: Undefined Security Weakness

An issue was discovered in Siemens ETA4 firmware all versions prior to Revision 08 of the SM-2558 extension module for: SICAM AK, SICAM TM 1703, SICAM BC 1703, and SICAM AK 3. Specially crafted packets sent to Port 2404/TCP could cause the affected device to go into defect mode. A cold start migh...

The vulnerability of the control device in the electrical energy sector, SICAM PAS, allows a intruder to access the database.

The vulnerability of the telecontrol device in the electric energy sector, SICAM PAS, is related to the storage of passwords in a recoverable format. Exploiting this vulnerability allows a malicious actor, who operates locally and has completed the authentication process, to restore user password...

The vulnerability of the control device in the electrical energy sector of SICAM PAS allows a intruder to cause a service failure or execute an arbitrary code.

The vulnerability of the telecontrol device in the electrical energy sector, SICAM PAS, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions or execute arbitrary commands by sending specially...

CVE-2016-9157

A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to cause a Denial of Service condition and potentially lead to unauthenticated remote code execution by sending specially crafted packets to port 19234/TCP...

CVE-2016-9157

A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to cause a Denial of Service condition and potentially lead to unauthenticated remote code execution by sending specially crafted packets to port 19234/TCP...

CVE-2016-9156

A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP...

Design/Logic Flaw

A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP...

Remote code execution

A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to cause a Denial of Service condition and potentially lead to unauthenticated remote code execution by sending specially crafted packets to port 19234/TCP...

CVE-2016-9156

A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP...

CVE-2016-9156

A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP...

CVE-2016-9157

CVE-2016-9157 affects Siemens SICAM PAS (all versions before v8.09). A vulnerability in SICAM PAS allows a remote attacker to trigger a denial-of-service condition and potentially achieve unauthenticated remote code execution by sending specially crafted packets to TCP port 19234. Affected produc...

CVE-2016-9156

Siemens SICAM PAS is affected (all versions prior to 8.09). A remote attacker could upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP. Mitigation: upgrade SICAM PAS to version 8.09 or later; apply network access controls t...

CVE-2016-9157

A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to cause a Denial of Service condition and potentially lead to unauthenticated remote code execution by sending specially crafted packets to port 19234/TCP...

CVE-2016-9156: Improper Input Validation

A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP...

PT-2016-2998 · Siemens · Sicam Pas

Name of the Vulnerable Software and Affected Versions: Siemens SICAM PAS versions prior to 8.00 Description: The issue is related to storing passwords in a recoverable format. An authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing t...

CVE-2016-9157: Improper Input Validation

A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to cause a Denial of Service condition and potentially lead to unauthenticated remote code execution by sending specially crafted packets to port 19234/TCP...

PT-2016-2996 · Siemens · Siemens Sicam Pas

Name of the Vulnerable Software and Affected Versions: Siemens SICAM PAS versions prior to V8.09 Description: The issue is related to inadequate access control, allowing a remote attacker to upload, download, or delete files in certain parts of the file system. This can be achieved by sending...