Summary
SICAM Q100 and Q200 devices are affected by two information disclosure vulnerabilities that could allow an authenticated local attacker to extract the SMTP account password and use the configured SMTP service for arbitrary purposes.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
Vulnerabilities 2
-
Medium 6.2
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions >= V2.60 < V2.62), POW…
-
Medium 6.2
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions >= V2.60 < V2.62), POW…
Revision history
-
#1
Publication Date
References
-
SSA-529291: Information Disclosure Vulnerabilities in SICAM Q100/Q200 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-529291.html