CVE-2023-38641: Siemens Sicam Toolbox Ii

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). The affected application's database service is executed as `NT AUTHORITY\SYSTEM`. This could allow a local attacker to execute operating system commands with elevated privileges.

Affected products

• Siemens Sicam Toolbox Ii: before 07.10 (fixed in 07.10)

Published 2023-08-08. Last modified 2026-06-17.