Siemens SICAM PAS through 8.07 allows local users to obtain sensitive configuration information by leveraging database stoppage.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02 | third party advisory us government resource |
http://www.securityfocus.com/bid/91525 | third party advisory vdb entry |
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf | vendor advisory |