Siemens SICAM A8000
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by a command injection vulnerability that could allow an authenticated remote attacker to inject commands that are executed on the device with root privileges during device startup. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-42797US | high7.2 | — | ||
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.20), CP-8050 MASTER MODULE (All versions < CPCI85 V05.20). The network configuration service… | ||||
references
External citations — patches, advisories, analysis.
- SSA-583634: Command Injection Vulnerability in the CPCI85 Firmware of SICAM A8000 Devices - CSAF Versionself
- SSA-583634: Command Injection Vulnerability in the CPCI85 Firmware of SICAM A8000 Devices - HTML Versionself
- SSA-583634: Command Injection Vulnerability in the CPCI85 Firmware of SICAM A8000 Devices - PDF Versionself
- SSA-583634: Command Injection Vulnerability in the CPCI85 Firmware of SICAM A8000 Devices - TXT Versionself
- ICS Advisory ICSA-24-011-08 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-011-08 - Web Versionself
- Recommended Practicesexternal
remediations (4)
- MitigationCP-8031 MASTER MODULE (6MF2803-1AA00)
Review the list of users that are allowed to modify the network configuration and apply strong passwords
- MitigationCP-8050 MASTER MODULE (6MF2805-0AA00)
Review the list of users that are allowed to modify the network configuration and apply strong passwords
- FixedCP-8031 MASTER MODULE (6MF2803-1AA00)
Update to CPCI85 V05.20 or later version
- FixedCP-8050 MASTER MODULE (6MF2805-0AA00)
Update to CPCI85 V05.20 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan