Summary
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by multiple vulnerabilities such as authenticated remote command injection, exposure of serial UART interface, and hard coded credentials (for UART login).
Siemens has released updates for the affected products and recommends to update to the latest versions.
Vulnerabilities 3
-
High 7.2CVE-2023-33919 EPSS 48%
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All ve…
-
Medium 6.8
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All ve…
-
Medium 6.8
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All ve…
Revision history
-
#1
Publication Date
References
-
SSA-731916: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-731916.html
-
SSA-731916: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-731916.pdf
-
SSA-731916: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-731916.txt
-
ICS Advisory ICSA-23-166-13 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-166-13
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B