SSA-491621: Denial of Service Vulnerability in CPC80 Firmware of SICAM A8000 Devices
A vulnerability was identified in the CPC80 firmware of SICAM A8000 devices. It could allow an unauthenticated remote attacker to cause a permanent denial of service condition. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-29884US | high7.5 | — | ||
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < CPC80 V16.30… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-491621: Denial of Service Vulnerability in CPC80 Firmware of SICAM A8000 Devices - CSAF Versionself
- SSA-491621: Denial of Service Vulnerability in CPC80 Firmware of SICAM A8000 Devices - PDF Versionself
- SSA-491621: Denial of Service Vulnerability in CPC80 Firmware of SICAM A8000 Devices - TXT Versionself
Behebungen (8)
- BehobenCP-8000 MASTER MODULE WITH I/O -25/+70°C
Update to CPC80 V16.30 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811278/ - BehobenCP-8000 MASTER MODULE WITH I/O -40/+70°C
Update to CPC80 V16.30 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811278/ - BehobenCP-8021 MASTER MODULE
Update to CPC80 V16.30 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811278/ - BehobenCP-8022 MASTER MODULE WITH GPRS
Update to CPC80 V16.30 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811278/ - WorkaroundCP-8000 MASTER MODULE WITH I/O -25/+70°C
Limit access to port 443/tcp to trusted IP addresses
- WorkaroundCP-8000 MASTER MODULE WITH I/O -40/+70°C
Limit access to port 443/tcp to trusted IP addresses
- WorkaroundCP-8021 MASTER MODULE
Limit access to port 443/tcp to trusted IP addresses
- WorkaroundCP-8022 MASTER MODULE WITH GPRS
Limit access to port 443/tcp to trusted IP addresses
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan