SSA-472454: Command Injection Vulnerability in CPCI85 Firmware of SICAM A8000 Devices
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by unauthenticated command injection vulnerability. This could allow an attacker to perfom remote code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-28489US | critical9.8 | — | ||
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). Affected devices are vulnerable to comm… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-472454: Command Injection Vulnerability in CPCI85 Firmware of SICAM A8000 Devices - CSAF Versionself
- SSA-472454: Command Injection Vulnerability in CPCI85 Firmware of SICAM A8000 Devices - HTML Versionself
- SSA-472454: Command Injection Vulnerability in CPCI85 Firmware of SICAM A8000 Devices - PDF Versionself
- SSA-472454: Command Injection Vulnerability in CPCI85 Firmware of SICAM A8000 Devices - TXT Versionself
Behebungen (4)
- MitigationCP-8031 MASTER MODULE (6MF2803-1AA00)
Limit access to the web server on port 80/TCP and 443/TCP with an external firewall.
- MitigationCP-8050 MASTER MODULE (6MF2805-0AA00)
Limit access to the web server on port 80/TCP and 443/TCP with an external firewall.
- BehobenCP-8031 MASTER MODULE (6MF2803-1AA00)
Update to CPCI85 V05 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804985/ - BehobenCP-8050 MASTER MODULE (6MF2805-0AA00)
Update to CPCI85 V05 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804985/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan