CVE-2016-5848

medium

Published 2016-07-04 · Modified 2026-05-06

CVSS v3

6.7

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2

1.7

VIR risk

6.7

Description

Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database privileges.

Predictions

Exploit likelihood

66%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf

Application impact

Vendor	Product	Versions	Fixed
siemens	sicam_pas\/pqs	`{"endIncluding":"8.07"}`

References

http://www.securityfocus.com/bid/91525
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02
http://www.securityfocus.com/bid/91525
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02

CWEs

CWE-200 CWE-255

Verify integrity in audit chain (admin only). AS-IS.