Siemens SICAM A8000 Web Server Module
A vulnerability was identified in the web server module used in the SICAM A8000 CP-8000, CP-8021 and CP-8022 devices' protocol firmwares. - AGPMT0 (AGP Master) - DNPiT1 (DNP3 TCP/IP Server) - DNPiT2 (DNP3 TCP/IP Client) - DNPMT0 (DNP3 Master seriell) - DNPST0 (DNP3 Slave seriell) - ET83 (61850 Ed.1) - ET85 (61850 Ed.2) - MBCiT0 (MODBUS TCP/IP Client) - MBSiT0 (MODBUS TCP/IP Server) - MODMT2 (MODBUS Master seriell) - OPUPT0 (OPCUA Pub/Sub) - OPUPT1 (Mindconnect) The vulnerability could allow unauthenticated access to the web interface of the affected web server module. The module is used for diagnostic purposes as well as commissioning and has to be activated manually within the protocol firmwares. For this reason the protocol firmwares are secure by default. Siemens updated the manual to make the situation transparent and raise awareness for operators. Siemens recommends countermeasures for products where updates are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-46304US | high7.5 | — | ||
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions), CP-8021 MASTER MODULE (All… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-185638: Authentication Bypass Vulnerability in SICAM A8000 Web Server Module - CSAF Versionself
- SSA-185638: Authentication Bypass Vulnerability in SICAM A8000 Web Server Module - PDF Versionself
- SSA-185638: Authentication Bypass Vulnerability in SICAM A8000 Web Server Module - TXT Versionself
- ICS Advisory ICSA-22-223-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-223-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (8)
- MitigationCP-8000 MASTER MODULE WITH I/O -25/+70°C
Operate the affected web server module only when required and consider the security instructions provided in the updated manual (see also Additional Information chapter)
- MitigationCP-8000 MASTER MODULE WITH I/O -40/+70°C
Operate the affected web server module only when required and consider the security instructions provided in the updated manual (see also Additional Information chapter)
- MitigationCP-8021 MASTER MODULE
Operate the affected web server module only when required and consider the security instructions provided in the updated manual (see also Additional Information chapter)
- MitigationCP-8022 MASTER MODULE WITH GPRS
Operate the affected web server module only when required and consider the security instructions provided in the updated manual (see also Additional Information chapter)
- Kein Fix geplantCP-8000 MASTER MODULE WITH I/O -25/+70°C
Currently no fix is planned
- Kein Fix geplantCP-8000 MASTER MODULE WITH I/O -40/+70°C
Currently no fix is planned
- Kein Fix geplantCP-8021 MASTER MODULE
Currently no fix is planned
- Kein Fix geplantCP-8022 MASTER MODULE WITH GPRS
Currently no fix is planned
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan