Vulnerability · Published Dec 13, 2022 · Assigned by siemens
CVE-2022-43722
High 7.8
In plain English
A high-severity uncontrolled search path in SICAM PAS/PQS from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Official description
A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that requires this DLL. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SICAM PAS/PQS | All versions < V7.0 |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H