GCVE - cpe:2.3:a:siemens:sicam_toolbox_ii:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:sicam_toolbox_ii:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Siemens (`4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f`)
Product	Sicam Toolbox Ii (`4f6860de-03ec-54ad-a3ed-3fc98a08acce`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-31854`	vulnerable	2026-06-08 06:35:32.173557	Details available HIGH (8.1) A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check device's certificate common name against an expected value. This could allow an attacker to execute an on-path network (MitM) attack. Published: 2025-07-08T10:34:22.862Z Updated: 2025-07-08T16:11:59.998Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/html/ssa-183963.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-31853`	vulnerable	2026-06-08 06:35:32.173187	Details available HIGH (8.1) A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check the extended key usage attribute of that device's certificate. This could allow an attacker to execute an on-path network (MitM) attack. Published: 2025-07-08T10:34:21.527Z Updated: 2025-07-08T16:12:08.292Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/html/ssa-183963.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-38641`	vulnerable	2026-06-08 06:08:18.516068	Details available HIGH (7.8) A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). The affected application's database service is executed as `NT AUTHORITY\SYSTEM`. This could allow a local attacker to execute operating system commands with elevated privileges. Published: 2023-08-08T09:20:43.085Z Updated: 2025-02-27T21:09:35.100Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-975961.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-39062`	vulnerable	2026-06-08 05:47:17.826213	Details available HIGH (7.8) A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation. Published: 2023-08-08T09:20:11.510Z Updated: 2025-02-27T21:10:34.368Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-975961.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-45106`	vulnerable	2026-06-08 05:36:47.980620	Details available A vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use a circumventable access control within a database service. This could allow an attacker to access the database. Published: 2022-02-09T15:17:12.000Z Updated: 2024-08-04T04:39:20.268Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-669737.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.