Siemens CPCI85 Firmware of SICAM A8000 Devices
Advisory ansehen veröffentlicht 2023-10-10
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 contains a hard-coded ID in the SSH authorized_keys configuration file. An attacker with knowledge of the corresponding credential could login to the device via SSH. Only devices with activated debug support are affected. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-36380US | high7.8OT erhöht | — | ||
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-134651: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices - CSAF Versionself
- SSA-134651: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices - HTML Versionself
- SSA-134651: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices - PDF Versionself
- SSA-134651: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices - TXT Versionself
- ICS Advisory ICSA-23-285-09 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-285-09 - Web Versionself
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenCP-8031 MASTER MODULE (6MF2803-1AA00)
Update to CPCI85 V05.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804985/ - BehobenCP-8050 MASTER MODULE (6MF2805-0AA00)
Update to CPCI85 V05.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804985/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan