CVE-2023-30901

highpriority · track · 35EPSS 0.004 · 30 %ileDEEUNLRUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.36% (30th) EPSS

CVSS 8.8 · high

Is it mine?

200 products

Check your exposure

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA02-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA02-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA11-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA11-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA12-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA12-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA31-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA31-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA32-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA32-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA00-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA00-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA10-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA10-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA30-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA30-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA01-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA01-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA02-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA02-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA11-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA11-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA12-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA12-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA31-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA31-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA32-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA32-2AA0) (All versions < V3.11), SICAM T (All versions < V3.0). The web interface of the affected devices are vulnerable to Cross-Site Request Forgery attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform arbitrary actions on the device on behalf of the victim user.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSICAM P850 (7KG8500-0AA00-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8500-0AA00-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8500-0AA10-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8500-0AA10-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8500-0AA30-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8500-0AA30-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8501-0AA01-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8501-0AA01-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8501-0AA02-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8501-0AA02-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8501-0AA11-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8501-0AA11-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8501-0AA12-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8501-0AA12-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8501-0AA31-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8501-0AA31-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8501-0AA32-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P850 (7KG8501-0AA32-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8550-0AA00-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8550-0AA00-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8550-0AA10-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8550-0AA10-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8550-0AA30-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8550-0AA30-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8551-0AA01-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8551-0AA01-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8551-0AA02-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8551-0AA02-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8551-0AA11-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8551-0AA11-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8551-0AA12-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8551-0AA12-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8551-0AA31-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8551-0AA31-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8551-0AA32-0AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM P855 (7KG8551-0AA32-2AA0)siemens_psirt
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/
FixedSICAM Tsiemens_psirt
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743625/
FixedPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)siemens_psirt
Update to V2.60 or later version
FixedPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)siemens_psirt
Update to V2.60 or later version
FixedPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)siemens_psirt
Update to V2.60 or later version
FixedPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)siemens_psirt
Update to V2.60 or later version
FixedPOWER METER SICAM Q200 familysiemens_psirt
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/
FixedPOWER METER SICAM Q200 familycisa_csaf_ot
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/
FixedPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)cisa_csaf_ot
Update to V2.60 or later version
FixedPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)cisa_csaf_ot
Update to V2.60 or later version
FixedPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)cisa_csaf_ot
Update to V2.60 or later version
FixedPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)cisa_csaf_ot
Update to V2.60 or later version
MitigationSICAM P850 (7KG8500-0AA00-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8500-0AA00-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8500-0AA10-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8500-0AA10-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8500-0AA30-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8500-0AA30-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA01-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA01-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA02-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA02-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA11-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA11-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA12-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA12-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA31-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA31-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA32-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA32-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8550-0AA00-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8550-0AA00-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8550-0AA10-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8550-0AA10-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8550-0AA30-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8550-0AA30-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA01-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA01-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA02-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA02-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA11-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA11-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA12-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA12-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA31-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA31-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA32-0AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA32-2AA0)siemens_psirt
Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM Tsiemens_psirt
Do not access links from untrusted sources while logged in at SICAM T
MitigationPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)siemens_psirt
CVE-2023-30901: Do not access links from untrusted sources while logged in at affected devices
MitigationPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)siemens_psirt
CVE-2023-30901: Do not access links from untrusted sources while logged in at affected devices
MitigationPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)siemens_psirt
CVE-2023-30901: Do not access links from untrusted sources while logged in at affected devices
MitigationPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)siemens_psirt
CVE-2023-30901: Do not access links from untrusted sources while logged in at affected devices
MitigationPOWER METER SICAM Q200 familysiemens_psirt
Do not access links from untrusted sources while logged in at Q200 devices
MitigationPOWER METER SICAM Q200 familycisa_csaf_ot
Do not access links from untrusted sources while logged in at Q200 devices
MitigationPOWER METER SICAM Q100 (7KG9501-0AA01-0AA1)cisa_csaf_ot
CVE-2023-30901: Do not access links from untrusted sources while logged in at affected devices
MitigationPOWER METER SICAM Q100 (7KG9501-0AA01-2AA1)cisa_csaf_ot
CVE-2023-30901: Do not access links from untrusted sources while logged in at affected devices
MitigationPOWER METER SICAM Q100 (7KG9501-0AA31-0AA1)cisa_csaf_ot
CVE-2023-30901: Do not access links from untrusted sources while logged in at affected devices
MitigationPOWER METER SICAM Q100 (7KG9501-0AA31-2AA1)cisa_csaf_ot
CVE-2023-30901: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8500-0AA00-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8500-0AA00-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8500-0AA10-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8500-0AA10-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8500-0AA30-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8500-0AA30-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA01-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA01-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA02-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA02-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA11-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA11-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA12-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA12-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA31-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA31-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA32-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P850 (7KG8501-0AA32-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8550-0AA00-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8550-0AA00-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8550-0AA10-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8550-0AA10-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8550-0AA30-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8550-0AA30-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA01-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA01-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA02-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA02-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA11-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA11-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA12-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA12-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA31-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA31-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA32-0AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices
MitigationSICAM P855 (7KG8551-0AA32-2AA0)cisa_csaf_ot
(CVE-2023-30901) All affected products: Do not access links from untrusted sources while logged in at affected devices

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.3–8.8

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 5.9

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:Nsecondary · CISA US

v3.14.3mediumAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:Nsecondary · FSTEC (BDU) RU

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:Nsecondary · ENISA EU

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:Nsecondary · productcert@siemens.com DEexploitability 2.8 · impact 1.4

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:Nsecondary · Siemens ProductCERT DE

v3.18.1highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-352USprimaryCWE-352USCWE-352USCWE-352USCWE-352US

affected products (200)

Products and version ranges known to be affected.

Siemens SICAMall versionscert_bundDEcpe:/h:siemens:sicam:-
Siemens SICAM P850 Devices <V3.11all versionscert_bundDE
Siemens SICAM P855 Devices <V3.11all versionscert_bundDE
Siemens SICAM Q200 <V2.70all versionscert_bundDE
Siemens SICAM T <V3.0all versionscert_bundDE
Siemens SICAM≤ P855 Devices <V3.11cert_bundDE
Siemens SICAM≤ Q200 <V2.70cert_bundDE
Siemens SICAM≤ P850 Devices <V3.11cert_bundDE
Siemens SICAM≤ T <V3.0cert_bundDE
Siemens SICAM P850 (7KG8500-0AA00-0AA0): <3.11all versionscisa_csaf_otUS
Siemens SICAM P850 (7KG8500-0AA00-2AA0): <3.11all versionscisa_csaf_otUS
Siemens SICAM P850 (7KG8500-0AA10-0AA0): <3.11all versionscisa_csaf_otUS
Siemens SICAM P850 (7KG8500-0AA10-2AA0): <3.11all versionscisa_csaf_otUS
Siemens SICAM P850 (7KG8500-0AA30-0AA0): <3.11all versionscisa_csaf_otUS
Siemens SICAM P850 (7KG8500-0AA30-2AA0): <3.11all versionscisa_csaf_otUS
Siemens SICAM P850 (7KG8501-0AA01-0AA0): <3.11all versionscisa_csaf_otUS
Siemens SICAM P850 (7KG8501-0AA01-2AA0): <3.11all versionscisa_csaf_otUS
Siemens SICAM P850 (7KG8501-0AA02-0AA0): <3.11all versionscisa_csaf_otUS
Siemens SICAM P850 (7KG8501-0AA02-2AA0): <3.11all versionscisa_csaf_otUS
Siemens SICAM P850 (7KG8501-0AA11-0AA0): <3.11all versionscisa_csaf_otUS

showing 20 of 200

advisories (10)

Vendor and ecosystem advisories describing this.

NCSC-2025-0357Kwetsbaarheden verholpen in Siemens productenNL2025-11-11csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Altair Grid Engine, COMOS, LOGO, SICAM, SIDOOR, SIMATIC, SIPLUS, Spectrum Power en Solid Edge.
NCSC-2025-0382Kwetsbaarheden verholpen in Siemens productenNL2025-12-09csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.
SSA-201498SSA-201498: Multiple Vulnerabilities in the Web Server of SICAM P850 and SICAM P855 Devices Before V3.112025-11-11csaf · siemens_psirtDE
The web server of SICAM P850 and SICAM P855 devices, versions before V3.11, contains a Cross Site Request Forgery (CSRF) vulnerability and is missing cookie protection flags. This could allow an attacker to perform arbitrary actions on the device on behalf of a legitimate user, or impersonate that user. Siemens has released new versions for the affected products and recommends to update to the latest versions.
SSA-471761SSA-471761: Multiple Vulnerabilities in SICAM T Before V3.02025-12-09csaf · siemens_psirtDE
SICAM T before V3.0 contain multiple vulnerabilities. These include critical issues such as improper parameter and input validation, various Cross-Site Scripting (XSS) vulnerabilities , and a Cross-Site Request Forgery (CSRF) vulnerability . Additional weaknesses comprise session fixation, authentication and authorization bypasses , missing HTTPS protection, and missing cookie protection flags. These issues could potentially lead to remote code execution, denial of service, unauthorized access to web-interface functionality, session hijacking, impersonation of legitimate users, or allow an attacker to perform arbitrary actions on the device on behalf of a user. Siemens has released a new version for SICAM T and recommends to update to the latest version.
SSA-480095SSA-480095: Vulnerabilities in the Web Interface of SICAM Q100 Devices before V2.602023-12-12csaf · siemens_psirtDE
The web server of SICAM Q100 devices, versions before V2.60, contains a Cross Site Request Forgery (CSRF) vulnerability and is missing cookie protection flags. This could allow an attacker to perform arbitrary actions on the device on behalf of a legitimate user, or impersonate that user. Siemens has released new versions for the affected products and recommends to update to the latest versions.
SSA-887249SSA-887249: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices2023-06-13csaf · siemens_psirtDE
Multiple vulnerabilities were identified in the webserver of Q200 devices. These include Cross Site Request Forgery (CSRF), session fixation, missing secure flags in HTTP cookies and memory corruption issues due to missing input validation that could lead to remote code execution. Siemens has released an update for POWER METER SICAM Q200 family and recommends to update to the latest version.
WID-SEC-W-2023-1431Siemens SICAM: Mehrere SchwachstellenDeutsch2023-06-12csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Siemens SICAM ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Code auszuführen.
ICSA-23-166-03Siemens SICAM Q200 Devices2023-06-13icsa · cisa_csaf_otUS
Multiple vulnerabilities were identified in the webserver of Q200 devices. These include Cross Site Request Forgery (CSRF), session fixation, missing secure flags in HTTP cookies and memory corruption issues due to missing input validation that could lead to remote code execution. Siemens has released an update for POWER METER SICAM Q200 family and recommends to update to the latest version.
ICSA-23-348-13Siemens SICAM Q100 Devices2023-12-12icsa · cisa_csaf_otUS
The web server of SICAM Q100 devices, versions before V2.60, contains a Cross Site Request Forgery (CSRF) vulnerability and is missing cookie protection flags. This could allow an attacker to perform arbitrary actions on the device on behalf of a legitimate user, or impersonate that user. Siemens has released new versions for the affected products and recommends to update to the latest versions.
ICSA-25-317-11Siemens SICAM P850 family and SICAM P855 family2025-11-13icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to perform arbitrary actions on the device on behalf of a legitimate user, or impersonate that user.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

published 2023-06-13modified 2026-10-24

related (10,361)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2025-62593US	high8.8OT critical	60.2% (99th)	KEV	2025-11-26
Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox an…
CVE-2023-2533US	high8.8OT critical	28.8% (98th)	KEV	2023-06-20
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security se…
CVE-2020-10181US	critical9.8OT critical	14.9% (97th)	KEV	2020-03-11
goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by…
CVE-2016-6277US	high8.8OT critical	99.8% (100th)	KEV	2016-12-14
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.…
CVE-2016-3718US	medium5.5OT critical	75.6% (100th)	KEV	2016-05-05
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted ima…

+10356 more

references (20)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan