Siemens SICAM A8000 Devices
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by multiple vulnerabilities such as authenticated remote command injection, exposure of serial UART interface, and hard coded credentials (for UART login). Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-33921US | medium6.8 | — | ||
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The affected devices contain an exposed… | ||||
| CVE-2023-33920US | medium6.8OT elevated | — | ||
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The affected devices contain the hash o… | ||||
| CVE-2023-33919US | high7.2 | — | ||
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The web interface of affected devices i… | ||||
references
External citations — patches, advisories, analysis.
- SSA-731916: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices - CSAF Versionself
- SSA-731916: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices - HTML Versionself
- SSA-731916: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices - PDF Versionself
- SSA-731916: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices - TXT Versionself
- ICS Advisory ICSA-23-166-13 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-166-13 - Web Versionself
- Recommended Practicesexternal
remediations (6)
- FixedCP-8031 MASTER MODULE (6MF2803-1AA00)
Update to CPCI85 V05 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804985/ - FixedCP-8031 MASTER MODULE (6MF2803-1AA00)
Update to CPCI85 V05 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804985/ - FixedCP-8031 MASTER MODULE (6MF2803-1AA00)
Update to CPCI85 V05 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804985/ - FixedCP-8050 MASTER MODULE (6MF2805-0AA00)
Update to CPCI85 V05 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804985/ - FixedCP-8050 MASTER MODULE (6MF2805-0AA00)
Update to CPCI85 V05 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804985/ - FixedCP-8050 MASTER MODULE (6MF2805-0AA00)
Update to CPCI85 V05 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804985/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan