Siemens SICAM A8000 Web Server Module
A vulnerability was identified in the web server module used in the SICAM A8000 CP-8000, CP-8021 and CP-8022 devices' protocol firmwares. - AGPMT0 (AGP Master) - DNPiT1 (DNP3 TCP/IP Server) - DNPiT2 (DNP3 TCP/IP Client) - DNPMT0 (DNP3 Master seriell) - DNPST0 (DNP3 Slave seriell) - ET83 (61850 Ed.1) - ET85 (61850 Ed.2) - MBCiT0 (MODBUS TCP/IP Client) - MBSiT0 (MODBUS TCP/IP Server) - MODMT2 (MODBUS Master seriell) - OPUPT0 (OPCUA Pub/Sub) - OPUPT1 (Mindconnect) The vulnerability could allow unauthenticated access to the web interface of the affected web server module. The module is used for diagnostic purposes as well as commissioning and has to be activated manually within the protocol firmwares. For this reason the protocol firmwares are secure by default. Siemens updated the manual to make the situation transparent and raise awareness for operators. Siemens recommends countermeasures for products where updates are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-46304US | high7.5 | — | ||
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions), CP-8021 MASTER MODULE (All… | ||||
references
External citations — patches, advisories, analysis.
- SSA-185638: Authentication Bypass Vulnerability in SICAM A8000 Web Server Module - CSAF Versionself
- SSA-185638: Authentication Bypass Vulnerability in SICAM A8000 Web Server Module - PDF Versionself
- SSA-185638: Authentication Bypass Vulnerability in SICAM A8000 Web Server Module - TXT Versionself
- ICS Advisory ICSA-22-223-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-223-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationCP-8000 MASTER MODULE WITH I/O -25/+70°C
Operate the affected web server module only when required and consider the security instructions provided in the updated manual (see also Additional Information chapter)
- MitigationCP-8000 MASTER MODULE WITH I/O -40/+70°C
Operate the affected web server module only when required and consider the security instructions provided in the updated manual (see also Additional Information chapter)
- MitigationCP-8021 MASTER MODULE
Operate the affected web server module only when required and consider the security instructions provided in the updated manual (see also Additional Information chapter)
- MitigationCP-8022 MASTER MODULE WITH GPRS
Operate the affected web server module only when required and consider the security instructions provided in the updated manual (see also Additional Information chapter)
- No fix plannedCP-8000 MASTER MODULE WITH I/O -25/+70°C
Currently no fix is planned
- No fix plannedCP-8000 MASTER MODULE WITH I/O -40/+70°C
Currently no fix is planned
- No fix plannedCP-8021 MASTER MODULE
Currently no fix is planned
- No fix plannedCP-8022 MASTER MODULE WITH GPRS
Currently no fix is planned
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan