ICSA-22-195-14

Siemens CPC80 Firmware of SICAM A8000

view advisory published 2022-07-12

A vulnerability was identified in the CPC80 firmware of SICAM A8000 devices. It could allow an unauthenticated remote attacker to cause a permanent denial of service condition. Siemens has released updates for the affected products and recommends to update to the latest versions.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-29884US	high7.5	1.29% (70th)	—	2022-07-12
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < CPC80 V16.30…

references

External citations — patches, advisories, analysis.

remediations (8)

FixedCP-8000 MASTER MODULE WITH I/O -25/+70°C
Update to CPC80 V16.30 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811278/
FixedCP-8000 MASTER MODULE WITH I/O -40/+70°C
Update to CPC80 V16.30 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811278/
FixedCP-8021 MASTER MODULE
Update to CPC80 V16.30 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811278/
FixedCP-8022 MASTER MODULE WITH GPRS
Update to CPC80 V16.30 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811278/
WorkaroundCP-8000 MASTER MODULE WITH I/O -25/+70°C
Limit access to port 443/tcp to trusted IP addresses
WorkaroundCP-8000 MASTER MODULE WITH I/O -40/+70°C
Limit access to port 443/tcp to trusted IP addresses
WorkaroundCP-8021 MASTER MODULE
Limit access to port 443/tcp to trusted IP addresses
WorkaroundCP-8022 MASTER MODULE WITH GPRS
Limit access to port 443/tcp to trusted IP addresses

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan