CVE-2016-3155
low
CVSS v3
3.4
CVSS v2
3.6
VIR risk
3.4
Description
Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors.
Predictions
Exploit likelihood
35%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cve@mitre.org — http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-151221.pdf
References
CWEs
CWE-200
Verify integrity in audit chain (admin only). AS-IS.