Siemens SICAM Products
Multiple SICAM products are affected by vulnerabilities that could lead to privilege escalation, remote code execution or information loss namely: - SICAM A8000 device firmwares - CPC80 for CP-8000/CP-8021/CP-8022 - CPCI85 and OPUPI0 for CP-8031/CP-8050 - SICAM EGS firmware - CPCI85 and OPUPI0 - SICAM 8 Software Solution - SICORE Siemens has released new versions for the affected firmwares and recommends to update to the latest versions.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-31486US | —OT elevated | — | ||
A vulnerability has been identified in OPUPI0 AMQP/MQTT (All versions < V5.30). The affected devices stores MQTT client passwords without sufficient protection on the devices. An… | ||||
| CVE-2024-31485US | — | — | ||
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base system (All versions < V1.3.0). The web interface of affected dev… | ||||
| CVE-2024-31484US | — | — | ||
A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communication (All versions < V5.30), CPCX26 Centra… | ||||
references
External citations — patches, advisories, analysis.
- SSA-871704: Multiple Vulnerabilities in SICAM Products - CSAF Versionself
- SSA-871704: Multiple Vulnerabilities in SICAM Products - HTML Versionself
- SSA-871704: Multiple Vulnerabilities in SICAM Products - PDF Versionself
- SSA-871704: Multiple Vulnerabilities in SICAM Products - TXT Versionself
- ICS Advisory ICSA-24-137-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-137-02 - Web Versionself
- Recommended Practicesexternal
remediations (5)
- FixedCPC80 Central Processing/Communication
Update to V16.41 or later version. The firmware CPC80 V16.41 is present within “CP-8000/CP-8021/CP-8022 Package” V16.41
- FixedCPCI85 Central Processing/Communication
Update to V5.30 or later version The firmware CPCI85 V5.30 is present within "CP-8031/CP-8050 Package" V5.30
- FixedCPCI85 Central Processing/Communication
Update to V5.30 or later version The firmware CPCI85 V5.30 is present within "CP-8031/CP-8050 Package" V5.30
- FixedOPUPI0 AMQP/MQTT
Update to V5.30 or later version The firmware OPUPI0 V5.30 is present within "CP-8031/CP-8050 Package" V5.30
- FixedSICORE Base system
Update to V1.3.0 or later version The firmware SICORE V1.3.0 is present within "SICAM 8 Software Solution Package" V5.30
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan