CVE-2016-5849

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-5849
Siemens SICAM PAS through 8.07 allows local users to obtain sensitive configuration information by leveraging database stoppage.

2.5 /10

CVSS v3.0 : LOW

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

1.9 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 3.4 / Impact : 2.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02 Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/91525 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:siemens:sicam_pas\/pqs:*:*:*:*:*:*:*:*
History

17 Oct 2023, 19:01

Type Values Removed Values Added
First Time Siemens sicam Pas\/pqs
CPE cpe:2.3:a:siemens:sicam_pas:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:sicam_pas\/pqs:*:*:*:*:*:*:*:*
References (BID) http://www.securityfocus.com/bid/91525 - (BID) http://www.securityfocus.com/bid/91525 - Third Party Advisory, VDB Entry
References (MISC) https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02 - (MISC) https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02 - Third Party Advisory, US Government Resource
Information

Published : 2016-07-04 16:59

Updated : 2023-10-17 19:01

NVD link : CVE-2016-5849

Mitre link : CVE-2016-5849

JSON object : View

Products Affected

siemens

  • sicam_pas\/pqs
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor