Siemens POWER METER SICAM Q100
view advisory published 2021-12-14
POWER METER SICAM Q100 contains a vulnerability that could allow an attacker to remotely execute code. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-44165US | high7.2 | — | ||
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41),… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-496292: Remote Code Execution Vulnerability in POWER METER SICAM Q100 - CSAF Versionself
- SSA-496292: Remote Code Execution Vulnerability in POWER METER SICAM Q100 - PDF Versionself
- SSA-496292: Remote Code Execution Vulnerability in POWER METER SICAM Q100 - TXT Versionself
- ICS Advisory ICSA-21-350-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-350-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationPOWER METER SICAM Q100
Restrict access to the web server e.g. with a firewall and ensure that the privileged accounts are protected by strong passwords.
- FixedPOWER METER SICAM Q100
Update to V2.41 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743524
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan