SICAM TOOLBOX II vulnerabilities
4 known vulnerabilities in SICAM TOOLBOX II from Siemens. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
SICAM TOOLBOX II: Improper Certificate Validation
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check device's certificate common name against an expected value
- 8.1 High severity
SICAM TOOLBOX II: Improper Certificate Validation
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check the extended key usage attribute of that device's certific
- 7.8 High severity
SICAM TOOLBOX II: Execution with Unnecessary Privileges
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). The affected application's database service is executed as `NT AUTHORITY\SYSTEM`. This could allow a local attacker to execute operating system commands with elevated privileges.
- 7.8 High severity
SICAM TOOLBOX II: Incorrect Permission Assignment for Critical Resource
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege e