Skip to content
OpenAdvisories
Medium SSA-201498 2 CVEs

SSA-201498: Multiple Vulnerabilities in the Web Server of SICAM P850 and SICAM P855 Devices Before V3.11

Published Nov 11, 2025 · Updated Nov 11, 2025

Vendor: Siemens Product: SICAM P850 (7KG8500-0AA00-0AA0) Product: SICAM P850 (7KG8500-0AA00-2AA0) Product: SICAM P850 (7KG8500-0AA10-0AA0) Product: SICAM P850 (7KG8500-0AA10-2AA0) Product: SICAM P850 (7KG8500-0AA30-0AA0) Product: SICAM P850 (7KG8500-0AA30-2AA0) Product: SICAM P850 (7KG8501-0AA01-0AA0) Product: SICAM P850 (7KG8501-0AA01-2AA0) Product: SICAM P850 (7KG8501-0AA02-0AA0) Product: SICAM P850 (7KG8501-0AA02-2AA0) Product: SICAM P850 (7KG8501-0AA11-0AA0) Product: SICAM P850 (7KG8501-0AA11-2AA0) Product: SICAM P850 (7KG8501-0AA12-0AA0) Product: SICAM P850 (7KG8501-0AA12-2AA0) Product: SICAM P850 (7KG8501-0AA31-0AA0) Product: SICAM P850 (7KG8501-0AA31-2AA0) Product: SICAM P850 (7KG8501-0AA32-0AA0) Product: SICAM P850 (7KG8501-0AA32-2AA0) Product: SICAM P855 (7KG8550-0AA00-0AA0) Product: SICAM P855 (7KG8550-0AA00-2AA0) Product: SICAM P855 (7KG8550-0AA10-0AA0) Product: SICAM P855 (7KG8550-0AA10-2AA0) Product: SICAM P855 (7KG8550-0AA30-0AA0) Product: SICAM P855 (7KG8550-0AA30-2AA0) Product: SICAM P855 (7KG8551-0AA01-0AA0) Product: SICAM P855 (7KG8551-0AA01-2AA0) Product: SICAM P855 (7KG8551-0AA02-0AA0) Product: SICAM P855 (7KG8551-0AA02-2AA0) Product: SICAM P855 (7KG8551-0AA11-0AA0) +7 more

Summary

The web server of SICAM P850 and SICAM P855 devices, versions before V3.11, contains a Cross Site Request Forgery (CSRF) vulnerability and is missing cookie protection flags. This could allow an attacker to perform arbitrary actions on the device on behalf of a legitimate user, or impersonate that user.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 2

Revision history

  1. #1

    Publication Date

References