Siemens POWER METER SICAM Q100
Advisory ansehen veröffentlicht 2021-12-14
POWER METER SICAM Q100 contains a vulnerability that could allow an attacker to remotely execute code. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-44165US | high7.2 | — | ||
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41),… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-496292: Remote Code Execution Vulnerability in POWER METER SICAM Q100 - CSAF Versionself
- SSA-496292: Remote Code Execution Vulnerability in POWER METER SICAM Q100 - PDF Versionself
- SSA-496292: Remote Code Execution Vulnerability in POWER METER SICAM Q100 - TXT Versionself
- ICS Advisory ICSA-21-350-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-350-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationPOWER METER SICAM Q100
Restrict access to the web server e.g. with a firewall and ensure that the privileged accounts are protected by strong passwords.
- BehobenPOWER METER SICAM Q100
Update to V2.41 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743524
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan