Siemens SICAM P850 and SICAM P855
Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-29883US | medium5.0OT elevated | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allo… | ||||
| CVE-2022-29882US | medium4.3 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of t… | ||||
| CVE-2022-29881US | medium5.0OT elevated | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain i… | ||||
| CVE-2022-29880US | low3.5 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate input in the configuration interface. This could allow an authentica… | ||||
| CVE-2022-29879US | medium4.0OT elevated | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain i… | ||||
| CVE-2022-29878US | medium6.8OT elevated | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response co… | ||||
| CVE-2022-29877US | medium6.5OT elevated | — | ||
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), S… | ||||
| CVE-2022-29876US | medium4.3 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directl… | ||||
| CVE-2022-29874US | medium5.0OT elevated | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could all… | ||||
| CVE-2022-29873US | high7.5 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an una… | ||||
| CVE-2022-29872US | medium6.5 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attac… | ||||
references
External citations — patches, advisories, analysis.
- SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - CSAF Versionself
- SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - PDF Versionself
- SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - TXT Versionself
- ICS Advisory ICSA-22-132-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-132-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (44)
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan