DeutschShown in its original language — a full translation is planned for a future version.
Siemens SICAM: Mehrere Schwachstellen
view advisory published 2023-10-09
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Siemens SICAM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-45205US | — | — | ||
A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.20). The affected application is installed with specific files and folders with insecure permission… | ||||
| CVE-2023-42796US | high8.8 | — | ||
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11). The web server of affected device… | ||||
| CVE-2023-38640US | medium4.4 | — | ||
A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.22). The affected application is installed with specific files and folders with insecure permission… | ||||
| CVE-2023-37195US | — | — | ||
A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 16… | ||||
| CVE-2023-37194US | — | — | ||
A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 16… | ||||
| CVE-2023-36380US | high7.8OT elevated | — | ||
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11… | ||||
| CVE-2021-45117US | medium6.5 | — | ||
The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference. | ||||
02
references
External citations — patches, advisories, analysis.
- Siemens Security Advisory vom 2023-10-09external
- Siemens Security Advisory vom 2023-10-09external
- Siemens Security Advisory vom 2023-10-09external
- Siemens Security Advisory vom 2023-10-09external
- Siemens Security Advisory vom 2023-10-09external
- WID-SEC-W-2023-2603 - CSAF Versionself
- WID-SEC-2023-2603 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan