Summary
SICAM Q100 devices contain multiple vulnerabilities that could allow an attacker to take over the session of a logged in user or to inject custom code.
Siemens has released updates for the affected products and recommends to update to the latest versions.
Vulnerabilities 4
-
Critical 9.9
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions < V2.50), POWER METER …
-
Critical 9.9
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…
-
Critical 9.9
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…
-
High 7.5
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…
Revision history
-
#2
Added legacy Q100 device models (-0AA1) which are also affected and provide the same fix version
-
#1
Publication Date
References
-
SSA-570294: Multiple Vulnerabilities in SICAM Q100 Before V2.50 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-570294.html
-
SSA-570294: Multiple Vulnerabilities in SICAM Q100 Before V2.50 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdf
-
SSA-570294: Multiple Vulnerabilities in SICAM Q100 Before V2.50 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-570294.txt