Summary
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by a command injection vulnerability that could allow an authenticated remote attacker to inject commands that are executed on the device with root privileges during device startup.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
Vulnerabilities 1
-
Medium 6.6
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.20), CP-8050 MASTER MODULE (All…
Revision history
-
#1
Publication Date
References
-
SSA-583634: Command Injection Vulnerability in the CPCI85 Firmware of SICAM A8000 Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-583634.html
-
SSA-583634: Command Injection Vulnerability in the CPCI85 Firmware of SICAM A8000 Devices - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-583634.pdf
-
SSA-583634: Command Injection Vulnerability in the CPCI85 Firmware of SICAM A8000 Devices - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-583634.txt
-
ICS Advisory ICSA-24-011-08 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-08
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B