Vulnerability Details CVE-2021-45460
A vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18). A service is started by an unquoted registry entry. As there are spaces in this path, attackers with write privilege to those directories might be able to plant executables that will run in place of the legitimate process. Attackers might achieve persistence on the system ("backdoors") or cause a denial of service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.7%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 5.5
References
Products affected by CVE-2021-45460
-
cpe:2.3:h:siemens:sicam_pq_analyzer:-
-
cpe:2.3:o:siemens:sicam_pq_analyzer_firmware:-
-
cpe:2.3:o:siemens:sicam_pq_analyzer_firmware:3.11