Siemens APOGEE Insight Incorrect File Permissions (CVE-2016-3155)

Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens APOGEE Insight Incorrect File Permissions Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-082-01 Siemens APOGEE Insight Incorrect File Permissions Vulnerability that was published March 22, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 3 -------- Siemens has identified an...

Siemens APOGEE Insight Incorrect File Permissions Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-082-01 Siemens APOGEE Insight Incorrect File Permissions Vulnerability that was published March 22, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 3 -------- Siemens has identified an...

Siemens APOGEE Insight Information Disclosure Vulnerability

Siemens APOGEE Insight is a building automation control system from Siemens, Germany. A security vulnerability exists in Siemens APOGEE Insight, which originates when the program assigns weak privileges to the application folder. A local attacker could exploit the vulnerability to obtain sensitiv...

CVE-2016-3155

Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-3155

Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-3155

Summary: CVE-2016-3155 affects Siemens APOGEE Insight, where the application folder has weak default permissions. This could let an authenticated local user view or modify APOGEE Insight data via unspecified vectors. The vulnerability is not remote-exploitable; exploitation requires OS-level acce...

Siemens APOGEE Insight Database Conversion Tool DLL Hijacking Vulnerability

Insight is the monitoring and configuration software used in the Siemens building automation system APOGEE. A DLL hijacking vulnerability exists in the Siemens APOGEE Insight Database Conversion Tool. Because Insight's Database Conversion component, the Convert.exe program, does not securely load...