Description
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SICAM T | < V3.0 | V3.0 |
Advisories 5
- NCSC-2025-0382 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Dec 9, 2025
- SSA-471761 SSA-471761: Multiple Vulnerabilities in SICAM T Before V3.0 Siemens ProductCERT · Dec 9, 2025
- WID-SEC-2025-2767 Siemens SICAM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 8, 2025
- ICSA-22-132-07 Siemens SICAM P850 and SICAM P855 CISA ICS & IT advisories · May 6, 2025
- SSA-165073 SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices Siemens ProductCERT · May 10, 2022