Sicam Toolbox Ii Security Vulnerabilities - 2023

CVE-2022-39062

A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation.

CVE-2023-38641

A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). The affected application's database service is executed as NT AUTHORITY\SYSTEM.This could allow a local attacker to execute operating system commands with elevated privileges.