Insecure Password Storage in Siemens SICAM PAS before 8.07

Insecure Password Storage in Siemens SICAM PAS before 8.07

CVE-2016-5848 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database privileges.

Learn more about our User Device Pen Test.