CVE-2016-3155
Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users...
CVE-2016-3155 is a low vulnerability (CVSS 3.4) in Siemens Apogee Insight, published March 18, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. No source names a fixed version.
Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors.
- Record
CVE-2016-3155- CVSS 3.0
- 3.4 Low
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N - CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors.
- Record
CVE-2016-3155- Updated
- 2026-11-02
EUVDEUVD-2016-4207 No score
Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors.
- Record
EUVD-2016-4207- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-62p6-fgm8-342j
Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users...
Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors.
- Record
GHSA-62p6-fgm8-342j- CVSS 3.0
- 3.4 Low
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |