SSA-871704: Multiple Vulnerabilities in SICAM Products
Multiple SICAM products are affected by vulnerabilities that could lead to privilege escalation, remote code execution or information loss namely: - SICAM A8000 device firmwares - CPC80 for CP-8000/CP-8021/CP-8022 - CPCI85 and OPUPI0 for CP-8031/CP-8050 - SICAM EGS firmware - CPCI85 and OPUPI0 - SICAM 8 Software Solution - SICORE Siemens has released new versions for the affected firmwares and recommends to update to the latest versions.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-31486US | —OT erhöht | — | ||
A vulnerability has been identified in OPUPI0 AMQP/MQTT (All versions < V5.30). The affected devices stores MQTT client passwords without sufficient protection on the devices. An… | ||||
| CVE-2024-31485US | — | — | ||
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base system (All versions < V1.3.0). The web interface of affected dev… | ||||
| CVE-2024-31484US | — | — | ||
A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communication (All versions < V5.30), CPCX26 Centra… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (5)
- BehobenCPC80 Central Processing/Communication
Update to V16.41 or later version. The firmware CPC80 V16.41 is present within “CP-8000/CP-8021/CP-8022 Package” V16.41
- BehobenCPCI85 Central Processing/Communication
Update to V5.30 or later version The firmware CPCI85 V5.30 is present within "CP-8031/CP-8050 Package" V5.30
- BehobenCPCI85 Central Processing/Communication
Update to V5.30 or later version The firmware CPCI85 V5.30 is present within "CP-8031/CP-8050 Package" V5.30
- BehobenOPUPI0 AMQP/MQTT
Update to V5.30 or later version The firmware OPUPI0 V5.30 is present within "CP-8031/CP-8050 Package" V5.30
- BehobenSICORE Base system
Update to V1.3.0 or later version The firmware SICORE V1.3.0 is present within "SICAM 8 Software Solution Package" V5.30
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan