A vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18).
Priority LOW 37CWE-428Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-428.
Summary
A vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18). A service is started by an unquoted registry entry. As there are spaces in this path, attackers with write privilege to those directories might be able to plant executables that will run in place of the legitimate process. Attackers might achieve persistence on the system ("backdoors") or cause a denial of service.
Why it matters now
EPSS 0.00855 58th percentileScored 2026-11-08
Fix Fixed SICAM PQ Analyzer (Siemens): V3.18
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SICAM PQ Analyzer | before V3.18 | V3.18 | Patch available | CNA |
- SICAM PQ Analyzer VendorSiemens Affected before V3.18 Fixed in V3.18 Patch available CNA
Remediation
- Fix · CNA SICAM PQ Analyzer (Siemens) Fixed in V3.18
Timeline
- 2026-10-02 Threatist record created from CVE-2021-45460
- 2026-10-03 Alias added: GHSA-x953-h4jc-jfvq
References
More Siemens Sicam Pq Analyzer Firmware vulnerabilities
- TI-2018-03434 Improper access control in Siemens IEC 61850 system configurator, DIGSI 5 , DIGSI 4… CVSS 3.1HIGH 7.8
Sources
- CVE-2021-45460 · CVE Program
- CVE-2021-45460 · NVD
- FIRST EPSS
- GHSA-x953-h4jc-jfvq · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences