A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that requires this DLL. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf | Patch Vendor Advisory |
Configurations
History
17 Oct 2023, 19:05
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Siemens sicam Pas\/pqs
Siemens |
|
| CPE | cpe:2.3:a:siemens:sicam_pas\/pqs:*:*:*:*:*:*:*:* |
13 Oct 2023, 16:45
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:siemens:sicam_pas:*:*:*:*:*:*:*:* |
15 Dec 2022, 20:03
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-427 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:a:siemens:sicam_pqs:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:sicam_pas:*:*:*:*:*:*:*:* |
|
| First Time |
Siemens
Siemens sicam Pqs Siemens sicam Pas |
|
| References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf - Patch, Vendor Advisory |
13 Dec 2022, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-12-13 16:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-43722
Mitre link : CVE-2022-43722
CVE.ORG link : CVE-2022-43722
JSON object : View
Products Affected
siemens
- sicam_pas\/pqs
CWE
CWE-427
Uncontrolled Search Path Element