Vulnerability in Siemens Sicam Pq Analyzer
CVE-2021-45460
A vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18). A service is started by an unquoted registry entry. As there are spaces in this path, attackers with write privilege to those directories might be able to plant executables that will run in place of the legitimate process. Attackers might achieve persistence on the system ("backdoors") or cause a denial of service.
EPSS: 0.008 (53.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.
Affected products
- Siemens Sicam Pq Analyzer — versions All versions < V3.18
- Siemens Sicam_pq_analyzer
- Siemens Sicam_pq_analyzer_firmware
Weakness classification (CWE)
References
- productcert@siemens.com (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-45460?
- CVE-2021-45460 is a high-severity vulnerability in Siemens Sicam Pq Analyzer, classified under Unquoted Search Path or Element. CVSS score: 8.1/10. Published 2022-01-11.
- How severe is CVE-2021-45460?
- High severity. CVSS v3 base score is 8.1 out of 10.