SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices
Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-29883US | medium5.0OT elevated | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allo… | ||||
| CVE-2022-29882US | medium4.3 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of t… | ||||
| CVE-2022-29881US | medium5.0OT elevated | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain i… | ||||
| CVE-2022-29880US | low3.5 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate input in the configuration interface. This could allow an authentica… | ||||
| CVE-2022-29879US | medium4.0OT elevated | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain i… | ||||
| CVE-2022-29878US | medium6.8OT elevated | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response co… | ||||
| CVE-2022-29877US | medium6.5OT elevated | — | ||
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), S… | ||||
| CVE-2022-29876US | medium4.3 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directl… | ||||
| CVE-2022-29874US | medium5.0OT elevated | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could all… | ||||
| CVE-2022-29873US | high7.5 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an una… | ||||
| CVE-2022-29872US | medium6.5 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attac… | ||||
references
External citations — patches, advisories, analysis.
- SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - CSAF Versionself
- SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - PDF Versionself
- SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - TXT Versionself
remediations (44)
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan