A vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use a circumventable access control within a database service. This could allow an attacker to access the database.
6.5CVSS
6.3AI Score
0.001EPSS
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation.
7.8CVSS
7.3AI Score
0.0004EPSS
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). The affected application's database service is executed as NT AUTHORITY\SYSTEM.This could allow a local attacker to execute operating system commands with elevated privileges.
7.8CVSS
7.5AI Score
0.0004EPSS