SSA-324998

csafDEsiemens_psirt

SSA-324998: Multiple Vulnerabilities in SICAM A8000

view advisory published 2022-01-11

SICAM A8000 devices are impacted by two vulnerabilities. The first one could allow a privileged user to enable a debug port with default credentials. The second vulnerability could allow unauthenticated access to certain previously created log files. Siemens has released updates for the affected products and recommends to update to the latest versions.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2021-45034UShigh7.5—
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < V16.20), CP-8021 M…
CVE-2021-45033UShigh8.8OT elevated—
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < V16.20), CP-8021 M…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan