Unscored CVE-2022-27480 EUVD-2022-31981GHSA-fcp5-57p2-vf46

A vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP-8050 (All versions < V4.80). Affected dev…

Published Apr 12, 2022 · Updated Aug 3, 2024 · Assigned by siemens

Vendor: Siemens Product: SICAM A8000 CP-8031 Product: SICAM A8000 CP-8050 Category: ICS / OT

Description

A vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP-8050 (All versions < V4.80). Affected devices do not require an user to be authenticated to access certain files. This could allow unauthenticated attackers to download these files.

Affected products

Vendor	Product	Affected	Fixed
Siemens	SICAM A8000 CP-8031	All versions < V4.80	—
Siemens	SICAM A8000 CP-8050	All versions < V4.80	—

Advisories 2

ICSA-22-104-10 Siemens SICAM A8000 CISA ICS & IT advisories · May 6, 2025
SSA-316850 SSA-316850: Unauthenticated File Access in SICAM A8000 Devices Siemens ProductCERT · Apr 12, 2022

References

https://cert-portal.siemens.com/productcert/pdf/ssa-316850.pdf
20220414 SEC Consult SA-20220413 :: Missing Authentication at File Download & Denial of Service in Siemens A8000 PLC mailing-list
http://packetstormsecurity.com/files/166743/Siemens-A8000-CP-8050-CP-8031-SICAM-WEB-Missing-File-Download-Missing-Authentication.html