GCVE - cpe:2.3:a:siemens:sicam_pas\/pqs:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:sicam_pas\/pqs:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Siemens (`4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f`)
Product	Sicam Pas/Pqs (`dfe9588d-fd77-5a89-abe7-857802b74b84`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-45205`	vulnerable	2026-06-08 06:12:42.195799	Details available HIGH (7.8) A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.20). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges to `NT AUTHORITY/SYSTEM`. Published: 2023-10-10T10:21:46.194Z Updated: 2024-08-02T20:14:19.961Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-035466.pdf https://cert-portal.siemens.com/productcert/html/ssa-035466.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-38640`	vulnerable	2026-06-08 06:08:18.514823	Details available MEDIUM (6.6) A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.22). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the application process. Published: 2023-10-10T10:21:25.048Z Updated: 2024-08-02T17:46:56.933Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-035466.pdf https://cert-portal.siemens.com/productcert/html/ssa-035466.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43724`	vulnerable	2026-06-08 05:49:33.959527	Details available A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software transmits the database credentials for the inbuilt SQL server in cleartext. In combination with the by default enabled xp_cmdshell feature unauthenticated remote attackers could execute custom OS commands. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions. Published: 2022-12-13T00:00:00.000Z Updated: 2025-04-22T15:15:56.110Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43723`	vulnerable	2026-06-08 05:49:33.958935	Details available A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0), SICAM PAS/PQS (All versions >= 7.0 < V8.06). Affected software does not properly validate the input for a certain parameter in the s7ontcp.dll. This could allow an unauthenticated remote attacker to send messages and create a denial of service condition as the application crashes. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions. Published: 2022-12-13T00:00:00.000Z Updated: 2025-04-22T15:22:17.726Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43722`	vulnerable	2026-06-08 05:49:33.958439	Details available A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that requires this DLL. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions. Published: 2022-12-13T00:00:00.000Z Updated: 2025-04-22T15:26:30.567Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-4858`	vulnerable	2026-06-08 05:11:49.829328	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9157`	vulnerable	2026-06-08 05:08:22.815818	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9156`	vulnerable	2026-06-08 05:08:22.815397	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8567`	vulnerable	2026-06-08 05:08:14.398043	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8566`	vulnerable	2026-06-08 05:08:14.397640	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5849`	vulnerable	2026-06-08 05:07:57.918533	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5848`	vulnerable	2026-06-08 05:07:57.918097	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.