Description
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions >= V2.60 < V2.62), POWER METER SICAM Q100 (7KG9501-0AA01-2AA1) (All versions >= V2.60 < V2.62), POWER METER SICAM Q100 (7KG9501-0AA31-0AA1) (All versions >= V2.60 < V2.62), POWER METER SICAM Q100 (7KG9501-0AA31-2AA1) (All versions >= V2.60 < V2.62), POWER METER SICAM Q200 family (All versions >= V2.70 < V2.80). Affected devices store the password for the SMTP account as plain text. This could allow an authenticated local attacker to extract it and use the configured SMTP service for arbitrary purposes.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | POWER METER SICAM Q100 | V2.60 – < V2.62 | V2.62 |
| Siemens | POWER METER SICAM Q200 family | V2.70 – < V2.80 | V2.80 |
Advisories 4
- WID-SEC-2025-1772 Siemens SICAM: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen BSI CERT-Bund (WID) · Aug 12, 2025
- NCSC-2025-0246 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 12, 2025
- ICSA-25-226-16 Siemens SICAM Q100/Q200 CISA ICS & IT advisories · Aug 12, 2025
- SSA-529291 SSA-529291: Information Disclosure Vulnerabilities in SICAM Q100/Q200 Siemens ProductCERT · Aug 12, 2025