CVE-2022-43722: High severity siemens sicam pas/pqs vulnerability
A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that requires this DLL. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-43722?
CVE-2022-43722 has been assigned a high severity rating due to the potential for remote code execution with SYSTEM privileges.
How do I fix CVE-2022-43722?
To fix CVE-2022-43722, upgrade to Siemens SICAM PAS/PQS version 7.0 or later.
What impact does CVE-2022-43722 have on my system?
CVE-2022-43722 could allow an attacker to execute custom malicious code on your system with elevated privileges.
Which versions of Siemens SICAM PAS/PQS are affected by CVE-2022-43722?
All versions of Siemens SICAM PAS/PQS prior to version 7.0 are affected by CVE-2022-43722.
Is there a specific system configuration that is vulnerable to CVE-2022-43722?
The vulnerability exists due to improper folder security in all configurations of Siemens SICAM PAS/PQS versions lower than 7.0.