SSA-134651: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices
view advisory published 2023-10-10
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 contains a hard-coded ID in the SSH authorized_keys configuration file. An attacker with knowledge of the corresponding credential could login to the device via SSH. Only devices with activated debug support are affected. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-36380US | high7.8OT elevated | — | ||
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-134651: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices - CSAF Versionself
- SSA-134651: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices - HTML Versionself
- SSA-134651: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices - PDF Versionself
- SSA-134651: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices - TXT Versionself
03
remediations (2)
- FixedCP-8031 MASTER MODULE (6MF2803-1AA00)
Update to CPCI85 V05.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804985/ - FixedCP-8050 MASTER MODULE (6MF2805-0AA00)
Update to CPCI85 V05.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804985/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan