Description
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SICAM T | < V3.0 | V3.0 |
Advisories 5
- NCSC-2025-0382 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Dec 9, 2025
- SSA-471761 SSA-471761: Multiple Vulnerabilities in SICAM T Before V3.0 Siemens ProductCERT · Dec 9, 2025
- WID-SEC-2025-2767 Siemens SICAM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 8, 2025
- ICSA-22-132-07 Siemens SICAM P850 and SICAM P855 CISA ICS & IT advisories · May 6, 2025
- SSA-165073 SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices Siemens ProductCERT · May 10, 2022