Siemens Sicam Toolbox Ii vulnerabilities

5 CVEs affecting Siemens Sicam Toolbox Ii, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-31854, published 2025-07-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-45106, published 2022-02-09. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use a circumventable access control within a database service. This could allow an attacker to access the…
CVE-2024-31854, published 2025-07-08. High severity, CVSS 8.1. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't…
CVE-2024-31853, published 2025-07-08. High severity, CVSS 8.1. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't…
CVE-2023-38641, published 2023-08-08. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). The affected application's database service is executed as `NT AUTHORITY\SYSTEM`. This could allow a local attacker…
CVE-2022-39062, published 2023-08-08. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker…