CVE-2023-38640: Siemens Sicam Pas/pqs

Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.22). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the application process.

Affected products

• Siemens Sicam Pas/pqs: from 8.00, before 8.22 (fixed in 8.22)

Published 2023-10-10. Last modified 2026-06-17.