Vulnerability Description
A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that requires this DLL. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Sicam Pas\/Pqs | < 7.0 |
Related Weaknesses (CWE)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdfPatchVendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdfPatchVendor Advisory
FAQ
What is CVE-2022-43722?
CVE-2022-43722 is a vulnerability with a CVSS score of 7.8 (HIGH). A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom...
How severe is CVE-2022-43722?
CVE-2022-43722 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-43722?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Sicam Pas\/Pqs.