Siemens SICAM Products
Multiple SICAM products are affected by unauthorized password reset and firmware downgrade vulnerabilities that could lead to privilege escalation and potential leak of information, namely: - SICAM A8000 Device firmware - CPCI85 for CP-8031/CP-8050 - SICAM EGS Device firmware - CPCI85 - SICAM 8 Software Solution - SICORE Siemens has released new firmware versions for the affected products and recommends to update to the latest versions.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-39601US | —OT erhöht | — | ||
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). Affected devices allow a remote a… | ||||
| CVE-2024-37998US | — | — | ||
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). The password of administrative ac… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-071402: Multiple Vulnerabilities in SICAM Products - CSAF Versionself
- SSA-071402: Multiple Vulnerabilities in SICAM Products - HTML Versionself
- SSA-071402: Multiple Vulnerabilities in SICAM Products - PDF Versionself
- SSA-071402: Multiple Vulnerabilities in SICAM Products - TXT Versionself
- ICS Advisory ICSA-24-207-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-207-01 - Web Versionself
- Recommended Practicesexternal
Behebungen (6)
- MitigationCPCI85 Central Processing/Communication
Disable the auto login feature
- MitigationSICORE Base system
Disable the auto login feature
- BehobenCPCI85 Central Processing/Communication
Update to V5.40 or later version The firmware CPCI85 V5.40 is present within “CP-8031/CP-8050 Package” V5.40
- BehobenCPCI85 Central Processing/Communication
Update to V5.40 or later version The firmware CPCI85 V5.40 is present within “CP-8031/CP-8050 Package” V5.40
- BehobenSICORE Base system
Update to V1.4.0 or later version The firmware SICORE V1.4.0 is present within “SICAM 8 Software Solution Package” V5.40
- BehobenSICORE Base system
Update to V1.4.0 or later version The firmware SICORE V1.4.0 is present within “SICAM 8 Software Solution Package” V5.40
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan