Siemens SICAM A8000 Devices
The web server in the CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by a path traversal vulnerability that could allow an authenticated remote attacker to traverse directories on the system, download arbitrary files and potentially escalate privileges to the administrator role. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-42796US | high8.8 | — | ||
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11). The web server of affected device… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-770890: Path Traversal Vulnerability in the Web Server of CPCI85 Firmware of SICAM A8000 Devices - CSAF Versionself
- SSA-770890: Path Traversal Vulnerability in the Web Server of CPCI85 Firmware of SICAM A8000 Devices - HTML Versionself
- SSA-770890: Path Traversal Vulnerability in the Web Server of CPCI85 Firmware of SICAM A8000 Devices - PDF Versionself
- SSA-770890: Path Traversal Vulnerability in the Web Server of CPCI85 Firmware of SICAM A8000 Devices - TXT Versionself
- ICS Advisory ICSA-23-285-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-285-03 - Web Versionself
- Recommended Practicesexternal
Behebungen (4)
- MitigationCP-8031 MASTER MODULE (6MF2803-1AA00)
Restrict network access to the integrated web server
- MitigationCP-8050 MASTER MODULE (6MF2805-0AA00)
Restrict network access to the integrated web server
- BehobenCP-8031 MASTER MODULE (6MF2803-1AA00)
Update to CPCI85 V05.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804985/ - BehobenCP-8050 MASTER MODULE (6MF2805-0AA00)
Update to CPCI85 V05.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804985/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan