SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices
Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-29883US | medium5.0OT erhöht | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allo… | ||||
| CVE-2022-29882US | medium4.3 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of t… | ||||
| CVE-2022-29881US | medium5.0OT erhöht | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain i… | ||||
| CVE-2022-29880US | low3.5 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate input in the configuration interface. This could allow an authentica… | ||||
| CVE-2022-29879US | medium4.0OT erhöht | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain i… | ||||
| CVE-2022-29878US | medium6.8OT erhöht | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response co… | ||||
| CVE-2022-29877US | medium6.5OT erhöht | — | ||
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), S… | ||||
| CVE-2022-29876US | medium4.3 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directl… | ||||
| CVE-2022-29874US | medium5.0OT erhöht | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could all… | ||||
| CVE-2022-29873US | high7.5 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an una… | ||||
| CVE-2022-29872US | medium6.5 | — | ||
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attac… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - CSAF Versionself
- SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - PDF Versionself
- SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - TXT Versionself
Behebungen (44)
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P850
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- BehobenSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - BehobenSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - BehobenSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - BehobenSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - BehobenSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - BehobenSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - BehobenSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - BehobenSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - BehobenSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - BehobenSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - BehobenSICAM P850
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - BehobenSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - BehobenSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - BehobenSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - BehobenSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - BehobenSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - BehobenSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - BehobenSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - BehobenSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - BehobenSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - BehobenSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - BehobenSICAM P855
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan