CVE-2022-43722 Code injection in SICAM PAS/PQS
An attacker can execute arbitrary code with SYSTEM privileges by placing a malicious DLL in an insecure folder within Siemens SICAM PAS/PQS.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2022-43722?
CVE-2022-43722 is a high-severity code injection vulnerability in Siemens SICAM PAS/PQS, published on 13 Dec 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that requires this DLL. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.
Weakness: CWE-427
Which versions are affected by CVE-2022-43722?
It affects 1 product.
Products include Siemens Sicam Pas\/Pqs.
How do I fix CVE-2022-43722?
No fix has been published for CVE-2022-43722 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2022-43722 being exploited?
There is no known exploitation of CVE-2022-43722 in the wild and no public exploit code.
Other vulnerabilities in Siemens SICAM PAS/PQS
- CVE-2022-43724 Hardcoded credentials in SICAM PAS/PQS
- CVE-2016-8567 Hardcoded credentials in Siemens SICAM PAS before 8.00
- CVE-2016-9157 Denial of service in Siemens SICAM PAS through V8.08
- CVE-2023-45205 Privilege escalation in SICAM PAS/PQS
- CVE-2016-8566 Hardcoded credentials in Siemens SICAM PAS before 8.00
Sources
Also known as GHSA-q34j-q58v-2jmm.