Critical ICSA-22-314-11 4 CVEs

Siemens SICAM Q100

Published Nov 8, 2022 · Updated Jan 9, 2024 · Revision 2

Vendor: Siemens Product: POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) Product: POWER METER SICAM Q100 (7KG9501-0AA01-2AA1) Product: POWER METER SICAM Q100 (7KG9501-0AA31-0AA1) Product: POWER METER SICAM Q100 (7KG9501-0AA31-2AA1)

Summary

SICAM Q100 devices contain multiple vulnerabilities that could allow an attacker to take over the session of a logged in user or to inject custom code.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 4

Critical 9.9

CVE-2022-43439

A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions < V2.50), POWER METER …

Siemens SICAM T SICAM P855 SICAM P850 ICS / OT

Nov 8, 2022
Critical 9.9

CVE-2022-43545

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…

Siemens SICAM P850 SICAM P855 POWER METER SICAM Q100 ICS / OT

Nov 8, 2022
Critical 9.9

CVE-2022-43546

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…

Siemens SICAM P850 SICAM P855 POWER METER SICAM Q100 ICS / OT

Nov 8, 2022
High 7.5

CVE-2022-43398

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…

Siemens POWER METER SICAM Q100 ICS / OT

Nov 8, 2022

Revision history

2024-01-09 #2
Added legacy Q100 device models (-0AA1) which are also affected and provide the same fix version
2022-11-08 #1
Publication Date

References

SSA-570294: Multiple Vulnerabilities in SICAM Q100 Before V2.50 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-570294.html
SSA-570294: Multiple Vulnerabilities in SICAM Q100 Before V2.50 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdf
SSA-570294: Multiple Vulnerabilities in SICAM Q100 Before V2.50 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-570294.txt
ICS Advisory ICSA-22-314-11 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-314-11
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B