Summary
A vulnerability was identified in the web server module used in the
SICAM A8000 CP-8000, CP-8021 and CP-8022 devices' protocol firmwares.
- AGPMT0 (AGP Master) - DNPiT1 (DNP3 TCP/IP Server) - DNPiT2 (DNP3
TCP/IP Client) - DNPMT0 (DNP3 Master seriell) - DNPST0 (DNP3 Slave
seriell) - ET83 (61850 Ed.1) - ET85 (61850 Ed.2) - MBCiT0 (MODBUS
TCP/IP Client) - MBSiT0 (MODBUS TCP/IP Server) - MODMT2 (MODBUS
Master seriell) - OPUPT0 (OPCUA Pub/Sub) - OPUPT1 (Mindconnect)
The vulnerability could allow unauthenticated access to the web
interface of the affected web server module. The module is used for
diagnostic purposes as well as commissioning and has to be activated
manually within the protocol firmwares. For this reason the protocol
firmwares are secure by default. Siemens updated the manual to make
the situation transparent and raise awareness for operators.
Siemens recommends countermeasures for products where updates are not,
or not yet available.
Vulnerabilities 1
-
Medium 5.3
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions), CP-8000 MASTER MODULE W…
Revision history
-
#1
Publication Date
References
-
SSA-185638: Authentication Bypass Vulnerability in SICAM A8000 Web Server Module - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-185638.pdf
-
SSA-185638: Authentication Bypass Vulnerability in SICAM A8000 Web Server Module - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-185638.txt