{"id":"CVE-2023-38640","aliases":["EUVD-2023-42439","GHSA-vvhw-v3wp-4m8r"],"status":"published","title":"A vulnerability has been identified in SICAM PAS/PQS (All versions \u003e= V8.00 \u003c V8.22). The...","description":"A vulnerability has been identified in SICAM PAS/PQS (All versions \u003e= V8.00 \u003c V8.22). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the application process.","severity":{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0016,"percentile":0.05262,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-732"],"published":"2023-10-10T10:21:25Z","modified":"2026-06-17T06:10:52Z","products":[{"vendor":"siemens","product":"sicam pas/pqs"},{"vendor":"siemens","product":"sicam_pas\\/pqs"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-035466.pdf","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-035466.html","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38640"},{"url":"https://github.com/advisories/GHSA-vvhw-v3wp-4m8r"}],"sources":{"cve":[{"id":"CVE-2023-38640","description":"A vulnerability has been identified in SICAM PAS/PQS (All versions \u003e= V8.00 \u003c V8.22). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the application process.","status":"published","published":"2023-10-10T10:21:25.048Z","modified":"2024-08-02T17:46:56.933Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C","level":"medium","assessor":"cna"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:35:30.116696Z"}],"euvd":[{"id":"EUVD-2023-42439","description":"A vulnerability has been identified in SICAM PAS/PQS (All versions \u003e= V8.00 \u003c V8.22). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the application process.","status":"published","published":"2023-10-10T10:21:25Z","modified":"2024-08-02T17:46:56Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C","level":"medium"}],"updated_at":"2026-11-03T03:50:02.733403Z"}],"ghsa":[{"id":"GHSA-vvhw-v3wp-4m8r","title":"A vulnerability has been identified in SICAM PAS/PQS (All versions \u003e= V8.00 \u003c V8.22). The...","description":"A vulnerability has been identified in SICAM PAS/PQS (All versions \u003e= V8.00 \u003c V8.22). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the application process.","status":"published","published":"2023-10-10T12:32:11Z","modified":"2024-06-11T09:32:46Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:57:27.150795Z"}],"nvd":[{"id":"CVE-2023-38640","description":"A vulnerability has been identified in SICAM PAS/PQS (All versions \u003e= V8.00 \u003c V8.22). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the application process.","status":"published","published":"2023-10-10T11:15:12.063Z","modified":"2026-06-17T06:10:52.587Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:08:36.656095Z"}]}}