SSA-496292: Remote Code Execution Vulnerability in POWER METER SICAM Q100
view advisory published 2021-12-14
POWER METER SICAM Q100 contains a vulnerability that could allow an attacker to remotely execute code. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-44165US | high7.2 | — | ||
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41),… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationPOWER METER SICAM Q100
Restrict access to the web server e.g. with a firewall and ensure that the privileged accounts are protected by strong passwords.
- FixedPOWER METER SICAM Q100
Update to V2.41 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743524
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan