SSA-529291

csafDEsiemens_psirt

SSA-529291: Information Disclosure Vulnerabilities in SICAM Q100/Q200

view advisory published 2025-08-12

SICAM Q100 and Q200 devices are affected by two information disclosure vulnerabilities that could allow an authenticated local attacker to extract the SMTP account password and use the configured SMTP service for arbitrary purposes. Siemens has released new versions for the affected products and recommends to update to the latest versions.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2025-40753US—OT elevated—
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions >= V2.60 < V2.62), POWER METER SICAM Q100 (7KG9501-0AA01-2AA1) (All versions >= V2.…
CVE-2025-40752US—OT elevated—
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions >= V2.60 < V2.62), POWER METER SICAM Q100 (7KG9501-0AA01-2AA1) (All versions >= V2.…
02

references

External citations — patches, advisories, analysis.

03

remediations (10)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan