Siemens SICAM A8000
Advisory ansehen veröffentlicht 2022-04-12
SICAM A8000 CP-8050 and CP-8031 devices contain vulnerabilities that could allow an attacker to access files without authentication. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-27480US | high7.5OT erhöht | — | ||
A vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP-8050 (All versions < V4.80). Affected devices do not require an user to be authent… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-316850: Unauthenticated File Access in SICAM A8000 Devices - CSAF Versionself
- SSA-316850: Unauthenticated File Access in SICAM A8000 Devices - PDF Versionself
- SSA-316850: Unauthenticated File Access in SICAM A8000 Devices - TXT Versionself
- ICS Advisory ICSA-22-104-10 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-104-10 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenSICAM A8000 CP-8031
Update to V4.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808338/ - BehobenSICAM A8000 CP-8050
Update to V4.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808338/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan