Vulnerability in Siemens Sicam Pq Analyzer
CVE-2021-45460
A vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18). A service is started by an unquoted registry entry. As there are spaces in this path, attackers with write privilege to those directories might be able to plant executables that will run in place of the legitimate process. Attackers might achieve persistence on the system ("backdoors") or cause a denial of service.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.
EPSS exploit prediction
EPSS: 0.008 (55.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 56th percentile — 55.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000
Affected products
- Siemens Sicam Pq Analyzer — versions All versions < V3.18
- Siemens Sicam Pq Analyzer
- Siemens Sicam Pq Analyzer Firmware
Weakness classification (CWE)
References
- cert-portal.siemens.com/productcert/pdf/ssa-173318.pdf (Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-45460?
- CVE-2021-45460 is a high-severity vulnerability in Siemens Sicam Pq Analyzer, classified under Unquoted Search Path or Element. CVSS score: 8.1/10. Published 2022-01-11.
- How severe is CVE-2021-45460?
- High severity. CVSS v3 base score is 8.1 out of 10.