Summary
SICAM T before V3.0 contain multiple vulnerabilities. These include critical issues such as improper parameter and input validation, various Cross-Site Scripting (XSS) vulnerabilities , and a Cross-Site Request Forgery (CSRF) vulnerability . Additional weaknesses comprise session fixation, authentication and authorization bypasses , missing HTTPS protection, and missing cookie protection flags. These issues could potentially lead to remote code execution, denial of service, unauthorized access to web-interface functionality, session hijacking, impersonation of legitimate users, or allow an attacker to perform arbitrary actions on the device on behalf of a user.
Siemens has released a new version for SICAM T and recommends to update to the latest version.
Vulnerabilities 15
-
Critical 9.9
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions < V2.50), POWER METER …
-
Critical 9.8
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate paramet…
-
Critical 9.8
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA0…
-
High 8.8
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate paramet…
-
High 8.8
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not encrypt web traffic with …
-
High 7.5
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices use a limited range for challeng…
-
High 7.5
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA0…
-
High 7.1
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input…
-
High 7.1
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not handle uploaded files cor…
-
Medium 6.5
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate input i…
-
Medium 5.5
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA0…
-
Medium 5.3
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected de…
-
Medium 5.3
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated …
-
Medium 4.3
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected de…
-
Medium 4.3
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA0…
Revision history
-
#1
Publication Date
References
-
SSA-471761: Multiple Vulnerabilities in SICAM T Before V3.0 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-471761.html