SSA-071402 — SSA-071402: Multiple Vulnerabilities in SICAM Products

Summary

Multiple SICAM products are affected by unauthorized password reset and firmware downgrade vulnerabilities that could lead to privilege escalation and potential leak of information, namely:

-
SICAM A8000 Device firmware

- CPCI85 for CP-8031/CP-8050

-
SICAM EGS Device firmware

- CPCI85

-
SICAM 8 Software Solution

- SICORE

Siemens has released new firmware versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 2

Critical 9.8

CVE-2024-37998

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base syst…

Siemens CPCI85 Central Processing/Communication SICORE Base system ICS / OT

Jul 22, 2024
Medium 6.5

CVE-2024-39601

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base syst…

Siemens CPCI85 Central Processing/Communication SICORE Base system ICS / OT

Jul 22, 2024

Revision history

2024-07-22 #1
Publication Date

References

SSA-071402: Multiple Vulnerabilities in SICAM Products - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-071402.html
SSA-071402: Multiple Vulnerabilities in SICAM Products - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-071402.pdf
SSA-071402: Multiple Vulnerabilities in SICAM Products - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-071402.txt