SSA-071402: Multiple Vulnerabilities in SICAM Products
Multiple SICAM products are affected by unauthorized password reset and firmware downgrade vulnerabilities that could lead to privilege escalation and potential leak of information, namely: - SICAM A8000 Device firmware - CPCI85 for CP-8031/CP-8050 - SICAM EGS Device firmware - CPCI85 - SICAM 8 Software Solution - SICORE Siemens has released new firmware versions for the affected products and recommends to update to the latest versions.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-39601US | —OT elevated | — | ||
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). Affected devices allow a remote a… | ||||
| CVE-2024-37998US | — | — | ||
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). The password of administrative ac… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- MitigationCPCI85 Central Processing/Communication
Disable the auto login feature
- MitigationSICORE Base system
Disable the auto login feature
- FixedCPCI85 Central Processing/Communication
Update to V5.40 or later version The firmware CPCI85 V5.40 is present within “CP-8031/CP-8050 Package” V5.40
- FixedCPCI85 Central Processing/Communication
Update to V5.40 or later version The firmware CPCI85 V5.40 is present within “CP-8031/CP-8050 Package” V5.40
- FixedSICORE Base system
Update to V1.4.0 or later version The firmware SICORE V1.4.0 is present within “SICAM 8 Software Solution Package” V5.40
- FixedSICORE Base system
Update to V1.4.0 or later version The firmware SICORE V1.4.0 is present within “SICAM 8 Software Solution Package” V5.40
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan