Description
A vulnerability has been identified in OPUPI0 AMQP/MQTT (All versions < V5.30). The affected devices stores MQTT client passwords without sufficient protection on the devices. An attacker with remote shell access or physical access could retrieve the credentials leading to confidentiality loss.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | OPUPI0 AMQP/MQTT | < V5.30 | V5.30 |
Advisories 3
- ICSA-24-137-02 Siemens SICAM Products CISA ICS & IT advisories · Jun 11, 2024
- SSA-871704 SSA-871704: Multiple Vulnerabilities in SICAM Products Siemens ProductCERT · Jun 11, 2024
- WID-SEC-2024-1111 Siemens SICAM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 10, 2024