SSA-570294

csafDEsiemens_psirt

SSA-570294: Multiple Vulnerabilities in SICAM Q100 Before V2.50

view advisory published 2022-11-08

SICAM Q100 devices contain multiple vulnerabilities that could allow an attacker to take over the session of a logged in user or to inject custom code. Siemens has released updates for the affected products and recommends to update to the latest versions.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2022-43546UShigh8.8—
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50),…
CVE-2022-43545UShigh8.8—
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50),…
CVE-2022-43439UShigh8.8—
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions < V2.50), POWER METER SICAM Q100 (7KG9501-0AA01-2AA1) (All versions < V2.50), POWER…
CVE-2022-43398UShigh8.8—
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50),…
02

references

External citations — patches, advisories, analysis.

03

remediations (32)

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)

    Update to V2.50 or later version

  • FixedPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)

    Update to V2.50 or later version

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

  • WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)

    Restrict access to port 443/tcp to trusted IP addresses only

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan