Lucene search
+L

178 matches found

Prion
Prion
•added 2023/10/10 11:15 a.m.•24 views

Design/Logic Flaw

A vulnerability has been identified in SICAM PAS/PQS All versions = V8.00 V8.22. The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the applicatio...

3.2CVSS4.3AI score0.0016EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/10/10 10:21 a.m.•66 views

CVE-2023-45205

Siemens SICAM PAS/PQS is affected (all versions >= 8.00 and

7.8CVSS7.5AI score0.00175EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/10/10 10:21 a.m.•41 views

CVE-2023-45205

A vulnerability has been identified in SICAM PAS/PQS All versions = V8.00 V8.20. The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges to NT AUTHORITY/SYSTE...

7.8CVSS7.8AI score0.00175EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/10/10 10:21 a.m.•14 views

CVE-2023-45205

A vulnerability has been identified in SICAM PAS/PQS All versions = V8.00 V8.20. The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges to NT AUTHORITY/SYSTE...

7.8CVSS7AI score0.00175EPSS
SaveExploits0References2
CVE
CVE
•added 2023/10/10 10:21 a.m.•75 views

CVE-2023-38640

Affected product: Siemens SICAM PAS/PQS (versions 8.00 up to but not including 8.22). The vulnerability is an incorrect privilege/permission assignment: the application installs with specific files and folders with insecure permissions, enabling an authenticated local attacker to read and modify ...

6.6CVSS4.3AI score0.0016EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/10/10 10:21 a.m.•39 views

CVE-2023-38640

A vulnerability has been identified in SICAM PAS/PQS All versions = V8.00 V8.22. The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the applicatio...

6.6CVSS6.2AI score0.0016EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/10/10 10:21 a.m.•16 views

CVE-2023-38640

A vulnerability has been identified in SICAM PAS/PQS All versions = V8.00 V8.22. The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the applicatio...

6.6CVSS6.2AI score0.0016EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•11 views

CVE-2023-45205: Incorrect Permission Assignment for Critical Resource

A vulnerability has been identified in SICAM PAS/PQS All versions = V8.00 V8.20. The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges to NT AUTHORITY/SYSTE...

7.8CVSS7.3AI score0.00175EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•8 views

CVE-2023-38640: Incorrect Permission Assignment for Critical Resource

A vulnerability has been identified in SICAM PAS/PQS All versions = V8.00 V8.22. The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the applicatio...

6.6CVSS5.8AI score0.0016EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/10/10 12:00 a.m.•8 views

PT-2023-29458

Name of the Vulnerable Software and Affected Versions SICAM PAS/PQS versions 8.00 through 8.20 Description A security issue has been identified where the application is installed with specific files and folders that have insecure permissions. This could allow an authenticated local attacker to...

7.8CVSS6.1AI score0.00175EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/10/10 12:00 a.m.•7 views

PT-2023-6262

Name of the Vulnerable Software and Affected Versions SICAM PAS/PQS versions V8.00 through V8.21 Description The issue is related to incorrect permission assignment for a critical resource in the SICAM PAS/PQS software, which can be exploited by an authenticated local attacker to read and modify...

6.6CVSS5.8AI score0.0016EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/10/10 12:00 a.m.•20 views

Siemens SICAM PAS/PQS security vulnerabilities

Siemens SICAM PAS/PQS is a software from Siemens with an operating system for energy automation and power quality. Siemens SICAM PAS/PQS suffers from an incorrect privilege assignment vulnerability that can be exploited by an attacker to read and modify configuration data in the context of an...

6.6CVSS6.8AI score0.0016EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/10 12:00 a.m.•17 views

Siemens SICAM PAS/PQS security vulnerabilities

Siemens SICAM PAS/PQS is a software from Siemens with an operating system for energy automation and power quality. Siemens SICAM PAS/PQS suffers from an incorrect privilege assignment vulnerability that can be exploited to inject arbitrary code and elevate privileges to NT AUTHORITY/SYSTEM...

7.8CVSS7.4AI score0.00175EPSS
SaveExploits0References2
ICS
ICS
•added 2023/10/10 12:00 a.m.•52 views

Siemens SICAM PAS/PQS

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

6.6CVSS5.6AI score0.0016EPSS
SaveExploits0References12
Github Security Blog
Github Security Blog
•added 2023/06/06 6:45 a.m.•4 views

Malware in fc-persoonlijke-pas

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/06/05 2:06 p.m.•9 views

Malicious code in fc-persoonlijke-pas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddadd77308256ef0411fae17ee4490cc470cd0234b284b8fe4b240e203586da4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•3 views

PT-2023-34123

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to the remoteproc subsystem, specifically the qcom q6v5 pas driver, where power domains are not properly detached on removal. This could potentially lead to security...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•3 views

PT-2023-33704

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to the remoteproc subsystem, specifically the qcom q6v5 pas driver, where power domains are not properly detached on removal. This could potentially lead to a security...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•3 views

PT-2023-34444

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the remoteproc subsystem, specifically the qcom q6v5 pas driver, where power domains are not properly detached on removal. This could potentially lead to security...

5.7AI score
SaveExploits0References1
CNVD
CNVD
•added 2022/12/14 12:00 a.m.•40 views

Siemens SICAM PAS/PQS Uncontrolled Search Path Element Vulnerability

Siemens SICAM PAS/PQS is a software from Siemens with an operating system for energy automation and power quality. A security vulnerability exists in Siemens SICAM PAS/PQS versions prior to V7.0 that stems from a failure to properly protect the containing folder. An attacker can exploit the...

7.8CVSS7.5AI score0.00223EPSS
SaveExploits0References1
Rows per page
Query Builder