CVE-2023-31238

mediumPriorität · verfolgen · 19EPSS 0.004 · 37. PerzentilDEEUNLRUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.43% (37th) EPSS

CVSS 4.8 · medium

Is it mine?

200 products

Prüfe deine Angriffsfläche

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA02-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA02-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA11-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA11-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA12-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA12-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA31-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA31-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA32-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA32-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA00-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA00-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA10-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA10-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA30-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA30-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA01-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA01-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA02-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA02-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA11-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA11-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA12-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA12-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA31-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA31-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA32-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA32-2AA0) (All versions < V3.11), SICAM T (All versions < V3.0). Affected devices are missing cookie protection flags when using the default settings. An attacker who gains access to a session token can use it to impersonate a legitimate application user.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenSICAM P850 (7KG8500-0AA00-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8500-0AA00-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8500-0AA10-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8500-0AA10-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8500-0AA30-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8500-0AA30-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8501-0AA01-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8501-0AA01-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8501-0AA02-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8501-0AA02-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8501-0AA11-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8501-0AA11-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8501-0AA12-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8501-0AA12-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8501-0AA31-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8501-0AA31-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8501-0AA32-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P850 (7KG8501-0AA32-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8550-0AA00-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8550-0AA00-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8550-0AA10-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8550-0AA10-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8550-0AA30-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8550-0AA30-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8551-0AA01-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8551-0AA01-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8551-0AA02-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8551-0AA02-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8551-0AA11-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8551-0AA11-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8551-0AA12-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8551-0AA12-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8551-0AA31-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8551-0AA31-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8551-0AA32-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM P855 (7KG8551-0AA32-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
BehobenSICAM Tsiemens_psirt
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743625/
BehobenPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)siemens_psirt
Update to V2.60 or later version
BehobenPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)siemens_psirt
Update to V2.60 or later version
BehobenPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)siemens_psirt
Update to V2.60 or later version
BehobenPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)siemens_psirt
Update to V2.60 or later version
BehobenPOWER METER SICAM Q200 familysiemens_psirt
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/
BehobenPOWER METER SICAM Q200 familycisa_csaf_ot
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/
BehobenPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)cisa_csaf_ot
Update to V2.60 or later version
BehobenPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)cisa_csaf_ot
Update to V2.60 or later version
BehobenPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)cisa_csaf_ot
Update to V2.60 or later version
BehobenPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)cisa_csaf_ot
Update to V2.60 or later version
MitigationSICAM P850 (7KG8500-0AA00-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8500-0AA00-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8500-0AA10-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8500-0AA10-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8500-0AA30-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8500-0AA30-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA01-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA01-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA02-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA02-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA11-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA11-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA12-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA12-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA31-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA31-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA32-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA32-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8550-0AA00-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8550-0AA00-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8550-0AA10-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8550-0AA10-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8550-0AA30-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8550-0AA30-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA01-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA01-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA02-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA02-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA11-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA11-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA12-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA12-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA31-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA31-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA32-0AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA32-2AA0)siemens_psirt
Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM Tsiemens_psirt
Do not access links from untrusted sources while logged in at SICAM T
MitigationPOWER METER SICAM Q200 familysiemens_psirt
Do not access links from untrusted sources while logged in at Q200 devices
MitigationPOWER METER SICAM Q200 familycisa_csaf_ot
Do not access links from untrusted sources while logged in at Q200 devices
MitigationSICAM P850 (7KG8500-0AA00-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8500-0AA00-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8500-0AA10-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8500-0AA10-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8500-0AA30-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8500-0AA30-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA01-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA01-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA02-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA02-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA11-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA11-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA12-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA12-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA31-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA31-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA32-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P850 (7KG8501-0AA32-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8550-0AA00-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8550-0AA00-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8550-0AA10-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8550-0AA10-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8550-0AA30-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8550-0AA30-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA01-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA01-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA02-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA02-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA11-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA11-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA12-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA12-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA31-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA31-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA32-0AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
MitigationSICAM P855 (7KG8551-0AA32-2AA0)cisa_csaf_ot
(CVE-2023-31238) All affected products: Restrict access to port 443/tcp to trusted IP addresses only
WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)siemens_psirt
CVE-2023-31238: Restrict access to port 443/tcp to trusted IP addresses only
WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)siemens_psirt
CVE-2023-31238: Restrict access to port 443/tcp to trusted IP addresses only
WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)siemens_psirt
CVE-2023-31238: Restrict access to port 443/tcp to trusted IP addresses only
WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)siemens_psirt
CVE-2023-31238: Restrict access to port 443/tcp to trusted IP addresses only
WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)cisa_csaf_ot
CVE-2023-31238: Restrict access to port 443/tcp to trusted IP addresses only
WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)cisa_csaf_ot
CVE-2023-31238: Restrict access to port 443/tcp to trusted IP addresses only
WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)cisa_csaf_ot
CVE-2023-31238: Restrict access to port 443/tcp to trusted IP addresses only
WorkaroundPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)cisa_csaf_ot
CVE-2023-31238: Restrict access to port 443/tcp to trusted IP addresses only

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.14.8mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:Nprimary · NVD / NIST USAusnutzbarkeit 2.2 · Auswirkung 2.5

v3.15.5mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:Lsecondary · CISA US

v3.14.8mediumAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:Nsecondary · FSTEC (BDU) RU

v3.15.5mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:Lsecondary · ENISA EU

v3.15.5mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:Lsecondary · productcert@siemens.com DEAusnutzbarkeit 1.3 · Auswirkung 3.7

v3.15.5mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:Lsecondary · Siemens ProductCERT DE

v3.14.4mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.15.5mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:Csecondary · NCSC-NL NL

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-732USprimärCWE-732USCWE-732USCWE-732USCWE-732US

betroffene Produkte (200)

Betroffene Produkte und Versionsbereiche.

Siemens SICAMalle Versionencert_bundDEcpe:/h:siemens:sicam:-
Siemens SICAM P850 Devices <V3.11alle Versionencert_bundDE
Siemens SICAM P855 Devices <V3.11alle Versionencert_bundDE
Siemens SICAM Q200 <V2.70alle Versionencert_bundDE
Siemens SICAM T <V3.0alle Versionencert_bundDE
Siemens SICAM≤ P855 Devices <V3.11cert_bundDE
Siemens SICAM≤ Q200 <V2.70cert_bundDE
Siemens SICAM≤ P850 Devices <V3.11cert_bundDE
Siemens SICAM≤ T <V3.0cert_bundDE
Siemens SICAM P850 (7KG8500-0AA00-0AA0): <3.11alle Versionencisa_csaf_otUS
Siemens SICAM P850 (7KG8500-0AA00-2AA0): <3.11alle Versionencisa_csaf_otUS
Siemens SICAM P850 (7KG8500-0AA10-0AA0): <3.11alle Versionencisa_csaf_otUS
Siemens SICAM P850 (7KG8500-0AA10-2AA0): <3.11alle Versionencisa_csaf_otUS
Siemens SICAM P850 (7KG8500-0AA30-0AA0): <3.11alle Versionencisa_csaf_otUS
Siemens SICAM P850 (7KG8500-0AA30-2AA0): <3.11alle Versionencisa_csaf_otUS
Siemens SICAM P850 (7KG8501-0AA01-0AA0): <3.11alle Versionencisa_csaf_otUS
Siemens SICAM P850 (7KG8501-0AA01-2AA0): <3.11alle Versionencisa_csaf_otUS
Siemens SICAM P850 (7KG8501-0AA02-0AA0): <3.11alle Versionencisa_csaf_otUS
Siemens SICAM P850 (7KG8501-0AA02-2AA0): <3.11alle Versionencisa_csaf_otUS
Siemens SICAM P850 (7KG8501-0AA11-0AA0): <3.11alle Versionencisa_csaf_otUS

20 von 200 angezeigt

Advisories (10)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2025-0357Kwetsbaarheden verholpen in Siemens productenNL2025-11-11csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Altair Grid Engine, COMOS, LOGO, SICAM, SIDOOR, SIMATIC, SIPLUS, Spectrum Power en Solid Edge.
NCSC-2025-0382Kwetsbaarheden verholpen in Siemens productenNL2025-12-09csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.
SSA-201498SSA-201498: Multiple Vulnerabilities in the Web Server of SICAM P850 and SICAM P855 Devices Before V3.112025-11-11csaf · siemens_psirtDE
The web server of SICAM P850 and SICAM P855 devices, versions before V3.11, contains a Cross Site Request Forgery (CSRF) vulnerability and is missing cookie protection flags. This could allow an attacker to perform arbitrary actions on the device on behalf of a legitimate user, or impersonate that user. Siemens has released new versions for the affected products and recommends to update to the latest versions.
SSA-471761SSA-471761: Multiple Vulnerabilities in SICAM T Before V3.02025-12-09csaf · siemens_psirtDE
SICAM T before V3.0 contain multiple vulnerabilities. These include critical issues such as improper parameter and input validation, various Cross-Site Scripting (XSS) vulnerabilities , and a Cross-Site Request Forgery (CSRF) vulnerability . Additional weaknesses comprise session fixation, authentication and authorization bypasses , missing HTTPS protection, and missing cookie protection flags. These issues could potentially lead to remote code execution, denial of service, unauthorized access to web-interface functionality, session hijacking, impersonation of legitimate users, or allow an attacker to perform arbitrary actions on the device on behalf of a user. Siemens has released a new version for SICAM T and recommends to update to the latest version.
SSA-480095SSA-480095: Vulnerabilities in the Web Interface of SICAM Q100 Devices before V2.602023-12-12csaf · siemens_psirtDE
The web server of SICAM Q100 devices, versions before V2.60, contains a Cross Site Request Forgery (CSRF) vulnerability and is missing cookie protection flags. This could allow an attacker to perform arbitrary actions on the device on behalf of a legitimate user, or impersonate that user. Siemens has released new versions for the affected products and recommends to update to the latest versions.
SSA-887249SSA-887249: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices2023-06-13csaf · siemens_psirtDE
Multiple vulnerabilities were identified in the webserver of Q200 devices. These include Cross Site Request Forgery (CSRF), session fixation, missing secure flags in HTTP cookies and memory corruption issues due to missing input validation that could lead to remote code execution. Siemens has released an update for POWER METER SICAM Q200 family and recommends to update to the latest version.
WID-SEC-W-2023-1431Siemens SICAM: Mehrere SchwachstellenDeutsch2023-06-12csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Siemens SICAM ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Code auszuführen.
ICSA-23-166-03Siemens SICAM Q200 Devices2023-06-13icsa · cisa_csaf_otUS
Multiple vulnerabilities were identified in the webserver of Q200 devices. These include Cross Site Request Forgery (CSRF), session fixation, missing secure flags in HTTP cookies and memory corruption issues due to missing input validation that could lead to remote code execution. Siemens has released an update for POWER METER SICAM Q200 family and recommends to update to the latest version.
ICSA-23-348-13Siemens SICAM Q100 Devices2023-12-12icsa · cisa_csaf_otUS
The web server of SICAM Q100 devices, versions before V2.60, contains a Cross Site Request Forgery (CSRF) vulnerability and is missing cookie protection flags. This could allow an attacker to perform arbitrary actions on the device on behalf of a legitimate user, or impersonate that user. Siemens has released new versions for the affected products and recommends to update to the latest versions.
ICSA-25-317-11Siemens SICAM P850 family and SICAM P855 family2025-11-13icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to perform arbitrary actions on the device on behalf of a legitimate user, or impersonate that user.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

veröffentlicht 2023-06-13geändert 2026-10-23

verwandt (1,935)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2022-22960US	high7.8OT kritisch	35.5% (98th)	KEV	2022-04-13
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor…
CVE-2021-23874US	high7.8OT kritisch	1.03% (63rd)	KEV	2021-02-10
Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP…
CVE-2019-15752US	high7.8OT kritisch	48.6% (99th)	KEV	2019-08-28
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\ve…
CVE-2018-13374US	medium4.3OT kritisch	38.1% (99th)	KEV	2019-01-22
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials co…
CVE-2021-25646US	high8.8	99.1% (100th)	Exploit	2021-01-29
Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments,…

+1930 weitere

Referenzen (20)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan